CVE-2022-49034, CVE-2023-52913, CVE-2023-52917 +1071 more CVEs: Rejected reason: This CVE ID (exact versions not specified); +14 more affected products

CVE-2022-49034

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2023-52913

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2023-52917

Affected technology

Rejected reason: This CVE ID · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-26718

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-26928

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-35864

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-35887

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-36476

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-36899

Affected technology

linux kernel · from 5.7 (inclusive), before 6.6.31 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.8.10 (exclusive)
linux

linux kernel · 6.9 · update rc1
linux

linux kernel · 6.9 · update rc2
linux

linux kernel · 6.9 · update rc3
linux

linux kernel · 6.9 · update rc4
linux

linux kernel · 6.9 · update rc5
linux

linux kernel · 6.9 · update rc6
linux

linux kernel · 6.9 · update rc7
linux

Linux · 51c1064e82e77b39a49889287ca50709303e2f26 to before 2dfbb920a89bdc58087672ad5325dc6c588b6860, 51c1064e82e77b39a49889287ca50709303e2f26 to before 2d008d4961b039d2edce8976289773961b7e5fb5, 51c1064e82e77b39a49889287ca50709303e2f26 to before d38c49f7bdf14381270736299e2ff68ec248a017, 51c1064e82e77b39a49889287ca50709303e2f26 to before 95ca7c90eaf5ea8a8460536535101e3e81160e2a, 51c1064e82e77b39a49889287ca50709303e2f26 to before ca710b5f40b8b16fdcad50bebd47f50e4c62d239, 51c1064e82e77b39a49889287ca50709303e2f26 to before 02f6b0e1ec7e0e7d059dddc893645816552039da
Linux

Linux · 5.7
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
Function: after
File: drivers/gpio/gpiolib-cdev.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-38608

Affected technology

linux kernel · from 4.12 (inclusive), before 6.9.3 (exclusive)
linux

Linux · 2c3b5beec46ab0d77c94828eb15170b333ae769a to before 70eca80d98a44f47cd1633d0c20bda8ae546b4d1, 2c3b5beec46ab0d77c94828eb15170b333ae769a to before f7e6cfb864a53af71c5cc904f1cc22215d68f5c6, 2c3b5beec46ab0d77c94828eb15170b333ae769a to before 3d5918477f94e4c2f064567875c475468e264644
Linux

Linux · 4.12
Linux

Component: Not specified by the source
File: drivers/net/ethernet/mellanox/mlx5/core/en_main.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-39282

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-39497

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-40953

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-40965

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-41013

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-41014

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-41016

Affected technology

linux kernel · before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.112 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.53 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.12 (exclusive)
linux

Linux · cf1d6c763fbcb115263114302485ad17e7933d87 to before e2b3d7a9d019d4d1a0da6c3ea64a1ff79c99c090, cf1d6c763fbcb115263114302485ad17e7933d87 to before e8f9c4af7af7e9e4cd09c0251c7936593147419f, cf1d6c763fbcb115263114302485ad17e7933d87 to before 57a3d89831fcaa2cdbe024b47c7c36d5a56c3637, cf1d6c763fbcb115263114302485ad17e7933d87 to before c031d286eceb82f72f8623b7f4abd2aa491bfb5e, cf1d6c763fbcb115263114302485ad17e7933d87 to before cfb926051fab19b10d1e65976211f364aa820180, cf1d6c763fbcb115263114302485ad17e7933d87 to before c726dea9d0c806d64c26fcef483b1fb9474d8c5e, cf1d6c763fbcb115263114302485ad17e7933d87 to before e4ffea01adf3323c821b6f37e9577d2d400adbaa, cf1d6c763fbcb115263114302485ad17e7933d87 to before af77c4fc1871847b528d58b7fdafb4aa1f6a9262
Linux

Linux · 2.6.28
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/ocfs2/xattr.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-41066

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-41080

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-41932

Affected technology

linux kernel · from 6.2 (inclusive), before 6.12.5 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

linux kernel · 6.13 · update rc2
linux

Linux · 8f9ea86fdf99b81458cc21fc1c591fcd4a0fa1f4 to before d35130036d327b6c175d95db9ea8d64e1abd4a1b, 8f9ea86fdf99b81458cc21fc1c591fcd4a0fa1f4 to before 5c3fb75f538cfcb886f6dfeb497d99fc2f263ee6, 8f9ea86fdf99b81458cc21fc1c591fcd4a0fa1f4 to before 70ee7947a29029736a1a06c73a48ff37674a851b
Linux

Linux · 6.2
Linux

Component: Not specified by the source
File: kernel/sched/syscalls.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-41935

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-42122

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-42252

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-42291

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-42315

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-43098

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-43900

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-44938

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-44955

Affected technology

Rejected reason: This CVE ID · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-45828

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-46784

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-46809

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-46841

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-46869

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-46871

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47141

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47143

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47408

Affected technology

linux kernel · from 5.10 (inclusive), before 5.15.176 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.122 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.68 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.7 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

linux kernel · 6.13 · update rc2
linux

linux kernel · 6.13 · update rc3
linux

Linux · 5c21c4ccafe85906db809de3af391fd434df8a27 to before 35da53027c1f2efdd7d0177dc00584134204761a, 5c21c4ccafe85906db809de3af391fd434df8a27 to before a36364d8d4fabb105001f992fb8ff2d3546203d6, 5c21c4ccafe85906db809de3af391fd434df8a27 to before e1cc8be2a785a8f1ce1f597f3e608602c5fccd46, 5c21c4ccafe85906db809de3af391fd434df8a27 to before 935caf324b445fe73d7708fae6f7176fb243f357, 5c21c4ccafe85906db809de3af391fd434df8a27 to before 48d5a8a304a643613dab376a278f29d3e22f7c34, 5c21c4ccafe85906db809de3af391fd434df8a27 to before 9ab332deb671d8f7e66d82a2ff2b3f715bc3a4ad
Linux

Linux · 5.10
Linux

Component: Not specified by the source
File: net/smc/af_smc.c, net/smc/smc_clc.h

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47670

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47671

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47672

Affected technology

Rejected reason: This CVE ID · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47673

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47675

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47676

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47677

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47678

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47679

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47680

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47681

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47682

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47684

Affected technology

linux kernel · from 4.13 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

linux kernel · 3.10.108
linux

Linux · e1a10ef7fa876f8510aaec36ea5c0cf34baba410 to before ad4f0a14d6856e68f023fc4e5017cfd881a3dfbc, e1a10ef7fa876f8510aaec36ea5c0cf34baba410 to before 16e0387d87fc858e34449fdf2b14ed5837f761db, e1a10ef7fa876f8510aaec36ea5c0cf34baba410 to before ec31cf42fc4e35bb1248ce6eb1de6de9f851ac86, e1a10ef7fa876f8510aaec36ea5c0cf34baba410 to before 5c4c03288a4aea705e36aa44119c13d7ee4dce99, e1a10ef7fa876f8510aaec36ea5c0cf34baba410 to before 96c4983eab2a5da235f7fff90beaf17b008ba029, e1a10ef7fa876f8510aaec36ea5c0cf34baba410 to before 570f7d8c9bf14f041152ba8353d4330ef7575915, e1a10ef7fa876f8510aaec36ea5c0cf34baba410 to before 81d18c152e3f82bacadf83bc0a471b2363b9cc18, e1a10ef7fa876f8510aaec36ea5c0cf34baba410 to before 09aea49fbc7e755a915c405644f347137cdb62b0, e1a10ef7fa876f8510aaec36ea5c0cf34baba410 to before c8770db2d54437a5f49417ae7b46f7de23d14db6, 42a858e036bb26cb559157393b7890cabe70bfc2, 3.10.108 to before 3.11
Linux

Linux · 4.13
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: include/net/tcp.h

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47685

Affected technology

debian linux · 11.0
debian

linux kernel · from 3.18 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · c8d7b98bec43faaa6583c3135030be5eb4693acb to before 872eca64c3267dbc5836b715716fc6c03a18eda7, c8d7b98bec43faaa6583c3135030be5eb4693acb to before 7bcbc4cda777d26c88500d973fad0d497fc8a82e, c8d7b98bec43faaa6583c3135030be5eb4693acb to before dcf48ab3ca2c55b09c8f9c8de0df01c1943bc4e5, c8d7b98bec43faaa6583c3135030be5eb4693acb to before fbff87d682e57ddbbe82abf6d0a1a4a36a98afcd, c8d7b98bec43faaa6583c3135030be5eb4693acb to before 7ea2bcfd9bf4c3dbbf22546162226fd1c14d8ad2, c8d7b98bec43faaa6583c3135030be5eb4693acb to before af4b8a704f26f38310655bad67fd8096293275a2, c8d7b98bec43faaa6583c3135030be5eb4693acb to before 7a7b5a27c53b55e91eecf646d1b204e73fa4af93, c8d7b98bec43faaa6583c3135030be5eb4693acb to before 10210658f827ad45061581cbfc05924b723e8922, c8d7b98bec43faaa6583c3135030be5eb4693acb to before 9c778fe48d20ef362047e3376dee56d77f8500d4
Linux

Linux · 3.18
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/ipv6/netfilter/nf_reject_ipv6.c

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 9.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47686

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47687

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47688

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47689

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47690

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47691

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47692

Affected technology

linux kernel · from 5.2 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · 74725959c33c14114fdce1e36e3504d106584d53 to before 6d07040ae5c2214e39c7444d898039c9e655a79a, 74725959c33c14114fdce1e36e3504d106584d53 to before 0f1d007bbea38a61cf9c5392708dc70ae9d84a3d, 74725959c33c14114fdce1e36e3504d106584d53 to before b7b7a8df41ef18862dd6b22289fb46c2c12398af, 74725959c33c14114fdce1e36e3504d106584d53 to before 84a563d136faf514fdad1ade28d7a142fd313cb8, 74725959c33c14114fdce1e36e3504d106584d53 to before 318f70857caab3da9a6ada9bc8c1f4f7591b695e, 74725959c33c14114fdce1e36e3504d106584d53 to before 766d5fbd78f7a52b3888449a0358760477b74602, 74725959c33c14114fdce1e36e3504d106584d53 to before 1ff8be8d008b9ddc8e7043fbddd37d5d451b271b, 74725959c33c14114fdce1e36e3504d106584d53 to before 22451a16b7ab7debefce660672566be887db1637
Linux

Linux · 5.2
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/nfsd/nfs4recover.c

Attack conditions (NVD, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 6.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47693

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47694

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47695

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47696

Affected technology

linux kernel · from 4.19.320 (inclusive), before 5.4 (exclusive)
linux

linux kernel · from 5.4.282 (inclusive), before 5.10 (exclusive)
linux

linux kernel · from 5.10.224 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.15.165 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 6.1.103 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.6.44 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.10.3 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · d91d253c87fd1efece521ff2612078a35af673c6 to before da2708a19f45b4a7278adf523837c8db21d1e2b5, 7f25f296fc9bd0435be14e89bf657cd615a23574 to before 29b3bbd912b8db86df7a3c180b910ccb621f5635, 94ee7ff99b87435ec63211f632918dc7f44dac79 to before 2efe8da2ddbf873385b4bc55366d09350b408df6, 557d035fe88d78dd51664f4dc0e1896c04c97cf6 to before da0392698c62397c19deb1b9e9bdf2fbb5a9420e, dc8074b8901caabb97c2d353abd6b4e7fa5a59a5 to before a64f30db12bdc937c5108158d98c8eab1925c548, ff5bbbdee08287d75d72e65b72a2b76d9637892a to before 8b7df76356d098f85f3bd2c7cf6fb43f531893d7, ee39384ee787e86e9db4efb843818ef0ea9cb8ae to before c8b18a75282cfd27822a8cc3c1f005c1ac8d1a58, aee2424246f9f1dadc33faa78990c1e2eb7826e4 to before a09dc967b3c58899e259c0aea092f421d22a0b04, aee2424246f9f1dadc33faa78990c1e2eb7826e4 to before 86dfdd8288907f03c18b7fb462e0e232c4f98d89, 4.19.320 to before 4.19.323, 5.4.282 to before 5.4.285, 5.10.224 to before 5.10.227, 5.15.165 to before 5.15.168, 6.1.103 to before 6.1.113, 6.6.44 to before 6.6.54, 6.10.3 to before 6.10.13
Linux

Linux · 6.11
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
Function: flush_workqueue, alloc_ordered_workqueue
File: drivers/infiniband/core/iwcm.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47697

Affected technology

debian linux · 11.0
debian

linux kernel · from 4.0 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 8ffbe7d07b8e76193b151107878ddc1ccc94deb5, df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 883f794c6e498ae24680aead55c16f66b06cfc30, df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before badbd736e6649c4e6d7b4ff7e2b9857acfa9ea94, df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 86d920d2600c3a48efc2775c1666c1017eec6956, df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 3dba83d3c81de1368d15a39f22df7b53e306052f, df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 58f31be7dfbc0c84a6497ad51924949cf64b86a2, df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 7fd6aae7e53b94f4035b1bfce28b8dfa0d0ae470, df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 042b101d7bf70616c4967c286ffa6fcca65babfb, df70ddad81b47c57bcccffc805fbd75f2f1b2dc6 to before 46d7ebfe6a75a454a5fa28604f0ef1491f9d8d14
Linux

Linux · 4.0
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/media/dvb-frontends/rtl2830.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47698

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47699

Affected technology

linux kernel · from 2.6.30 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before 2b78e9df10fb7f4e9d3d7a18417dd72fbbc1dfd0, 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before 1d94dbdfbb64cc48d10dec65cc3c4fbf2497b343, 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before 24bf40740a3da6b4056721da34997ae6938f3da1, 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before 73d23ecf234b7a6d47fb883f2dabe10e3230b31d, 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before f68523e0f26faade18833fbef577a4295d8e2c94, 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before 21839b6fbc3c41b3e374ecbdb0cabbbb2c53cf34, 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before db73500d3f0e558eb642aae1d4782e7726b4a03f, 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before 3644554d308ddf2669e459a1551a7edf60b2d62b, 17c76b0104e4a6513983777e1a17e0297a12b0c4 to before 9403001ad65ae4f4c5de368bdda3a0636b51d51a
Linux

Linux · 2.6.30
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/nilfs2/btree.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47700

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47701

Affected technology

linux kernel · from 3.8 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · e8e948e7802a2ab05c146d3e72a39b93b5718236 to before 5b076d37e8d99918e9294bd6b35a8bbb436819b0, e8e948e7802a2ab05c146d3e72a39b93b5718236 to before 8adf0eb4e361a9e060d54f4bd0ac9c5d85277d20, e8e948e7802a2ab05c146d3e72a39b93b5718236 to before 7fc22c3b3ffc0e952f5e0062dd11aa6ae76affba, e8e948e7802a2ab05c146d3e72a39b93b5718236 to before be2e9b111e2790962cc66a177869b4e9717b4e29, e8e948e7802a2ab05c146d3e72a39b93b5718236 to before ea32883e4a03ed575a2eb7a66542022312bde477, e8e948e7802a2ab05c146d3e72a39b93b5718236 to before 2a6579ef5f2576a940125729f7409cc182f1c8df, e8e948e7802a2ab05c146d3e72a39b93b5718236 to before 371d0bacecd529f887ea2547333d9173e7bcdc0a, e8e948e7802a2ab05c146d3e72a39b93b5718236 to before ccb8c18076e2e630fea23fbec583cdad61787fc5, e8e948e7802a2ab05c146d3e72a39b93b5718236 to before c6b72f5d82b1017bad80f9ebf502832fc321d796
Linux

Linux · 3.8
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: fs/ext4/inline.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47702

Affected technology

linux kernel · from 6.6 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · 1f1e864b65554e33fe74e3377e58b12f4302f2eb to before 4b48228eebce2ab1b01e3133da822164472b7e46, 1f1e864b65554e33fe74e3377e58b12f4302f2eb to before f1620c93a1ec950d87ef327a565d3907736d3340, 1f1e864b65554e33fe74e3377e58b12f4302f2eb to before f09757fe97a225ae505886eac572e4cbfba96537, 1f1e864b65554e33fe74e3377e58b12f4302f2eb to before 92de36080c93296ef9005690705cba260b9bd68a
Linux

Linux · 6.6
Linux

Component: Not specified by the source
Function: for
File: include/linux/bpf.h, kernel/bpf/verifier.c, net/core/filter.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47703

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47704

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47705

Affected technology

linux kernel · from 5.5 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · b72053072c0bbe9f1cdfe2ffa3c201c185da2201 to before 4bc4272e2506941c3f3d4fb8b0c659ee814dcf6f, b72053072c0bbe9f1cdfe2ffa3c201c185da2201 to before cc4d21d9492db4e534d3e01253cf885c90dd2a8b, b72053072c0bbe9f1cdfe2ffa3c201c185da2201 to before 64cf2a39202ca2d9df5ee70eb310b6141ce2b8ed, b72053072c0bbe9f1cdfe2ffa3c201c185da2201 to before 80f5bfbb80ea1615290dbc24f49d3d8c86db58fe, b72053072c0bbe9f1cdfe2ffa3c201c185da2201 to before 652039ba477c9a4ab43740cf2cb0d068d53508c2, b72053072c0bbe9f1cdfe2ffa3c201c185da2201 to before afe53ea9b378c376101d99d216f13b6256f75189, b72053072c0bbe9f1cdfe2ffa3c201c185da2201 to before 26e197b7f9240a4ac301dd0ad520c0c697c2ea7d
Linux

Linux · 5.5
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
Function: initially, to, now
File: block/partitions/core.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47706

Affected technology

linux kernel · from 4.12 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · 36eca894832351feed9072d0f97eb06fc9482ca4 to before a9bdd5b36887d2bacb8bc777fd18317c99fc2587, 36eca894832351feed9072d0f97eb06fc9482ca4 to before bc2140534b2aae752e4f7cb4489642dbb5ec4777, 36eca894832351feed9072d0f97eb06fc9482ca4 to before e1277ae780cca4e69ef5468d4582dfd48f0b8320, 36eca894832351feed9072d0f97eb06fc9482ca4 to before 8aa9de02a4be2e7006e636816ce19b0d667ceaa3, 36eca894832351feed9072d0f97eb06fc9482ca4 to before ddbdaad123254fb53e32480cb74a486a6868b1e0, 36eca894832351feed9072d0f97eb06fc9482ca4 to before 7faed2896d78e48ec96229e73b30b0af6c00a9aa, 36eca894832351feed9072d0f97eb06fc9482ca4 to before 880692ee233ba63808182705b3333403413b58f5, 36eca894832351feed9072d0f97eb06fc9482ca4 to before 6d130db286ad0ea392c96ebb2551acf0d7308048, 36eca894832351feed9072d0f97eb06fc9482ca4 to before 18ad4df091dd5d067d2faa8fce1180b79f7041a7
Linux

Linux · 4.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: block/bfq-iosched.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47707

Affected technology

linux kernel · from 4.3 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · e332bc67cf5e5e5b71a1aec9750d0791aac65183 to before a61a174280dad99f25a7dee920310885daf2552b, e332bc67cf5e5e5b71a1aec9750d0791aac65183 to before 8a8b83016f06805775db099c8377024b6fa5b975, e332bc67cf5e5e5b71a1aec9750d0791aac65183 to before e43dd28405e6b9935279996725ee11e6306547a5, e332bc67cf5e5e5b71a1aec9750d0791aac65183 to before f2bd9635543ca41533b870f420872819f8331823, e332bc67cf5e5e5b71a1aec9750d0791aac65183 to before 0ceb2f2b5c813f932d6e60d3feec5e7e713da783, e332bc67cf5e5e5b71a1aec9750d0791aac65183 to before 9a0ddc73be37d19dff1ba08290af34e707d18e50, e332bc67cf5e5e5b71a1aec9750d0791aac65183 to before 08409e401622e2896b4313be9f781bde8a2a6a53, e332bc67cf5e5e5b71a1aec9750d0791aac65183 to before 04ccecfa959d3b9ae7348780d8e379c6486176ac, 58d772c203ee57c45620730198bc2d9ded7a1464, 4.2.5 to before 4.3
Linux

Linux · 4.3
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: net/ipv6/route.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47708

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47709

Affected technology

linux kernel · from 5.4.284 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 6.1.110 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.6.51 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.10.10 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

linux kernel · 4.19.322
linux

linux kernel · 5.10.226
linux

linux kernel · 5.15.167
linux

Linux · 5c680022c4e28ba18ea500f3e29f0428271afa92 to before f5059fae5ed518fc56494ce5bdd4f5360de4b3bc, 33ed4ba73caae39f34ab874ba79138badc2c65dd to before a833da8eec20b51af39643faa7067b25c8b20f3e, aec92dbebdbec7567d9f56d7c9296a572b8fd849 to before 5cc00913c1fdcab861c4e65fa20d1f1e1bbbf977, 10bfacbd5e8d821011d857bee73310457c9c989a to before 9550baada4c8ef8cebefccc746384842820b4dff, 3b39dc2901aa7a679a5ca981a3de9f8d5658afe8 to before 7a145d6ec2124bdb94bd6fc436b342ff6ddf2b70, 4377b79323df62eb5d310354f19b4d130ff58d50 to before c3d941cc734e0c8dc486c062926d5249070af5e4, abb0a615569ec008e8a93d9f3ab2d5b418ea94d4 to before 770b463264426cc3c167b1d44efa85f6a526ce5b, 76fe372ccb81b0c89b6cd2fec26e2f38c958be85 to before b02ed2f01240b226570b4a19b5041d61f5125784, 76fe372ccb81b0c89b6cd2fec26e2f38c958be85 to before 94b0818fa63555a65f6ba107080659ea6bcca63e, 4.19.322 to before 4.19.323, 5.4.284 to before 5.4.285, 5.10.226 to before 5.10.227, 5.15.167 to before 5.15.168, 6.1.110 to before 6.1.113, 6.6.51 to before 6.6.54, 6.10.10 to before 6.10.13
Linux

Linux · 6.11
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/can/bcm.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47710

Affected technology

linux kernel · from 5.4.49 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.7.6 (inclusive), before 5.8 (exclusive)
linux

linux kernel · from 5.8 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · 5bed77b0a2a0e6b6bc0ae8e851cafb38ef0374df to before bc05f6855642cff3c0eeb63060b35d8c4f8a851d, 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 to before 1a11a1a53255ddab8a903cdae01b9d3eb2c1a47b, 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 to before 984648aac87a6a1c8fd61663bec3f7b61eafad5e, 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 to before 04f62c012e0e4683e572b30baf6004ca0a3f6772, 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 to before 80bd490ac0a3b662a489e17d8eedeb1e905a3d40, 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 to before ae8c1b3e7353ad240b829eabac7ba2584b2c6bdc, 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 to before cd10abf41bae55c9d2b93f34a516dbf52626bcb7, 75e68e5bf2c7fa9d3e874099139df03d5952a3e1 to before b1339be951ad31947ae19bc25cb08769bf255100, 6fc372656a1ebed8c1ebe0011881058c02eeddc0, 5.4.49 to before 5.4.285, 5.7.6 to before 5.8
Linux

Linux · 5.8
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/core/sock_map.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47711

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47712

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47713

Affected technology

linux kernel · from 2.6.32 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · 5061b0c2b9066de426fbc63f1278d2210e789412 to before 07eb0bd7b0a8abed9d45e0f567c9af1dc83e5268, 5061b0c2b9066de426fbc63f1278d2210e789412 to before 04f75f5bae33349283d6886901d9acd2f110c024, 5061b0c2b9066de426fbc63f1278d2210e789412 to before f232916fab67ca1c3425926df4a866e59ff26908, 5061b0c2b9066de426fbc63f1278d2210e789412 to before acb53a716e492a02479345157c43f21edc8bc64b, 5061b0c2b9066de426fbc63f1278d2210e789412 to before db5ca4b42ccfa42d2af7b335ff12578e57775c02, 5061b0c2b9066de426fbc63f1278d2210e789412 to before 058c9026ad79dc98572442fd4c7e9a36aba6f596, 5061b0c2b9066de426fbc63f1278d2210e789412 to before eab272972cffff9cd973b8e4055a8e81c64f7e6a, 5061b0c2b9066de426fbc63f1278d2210e789412 to before ad4b7068b101fbbb4a9ca4b99b25eb051a9482ec, 5061b0c2b9066de426fbc63f1278d2210e789412 to before 9d301de12da6e1bb069a9835c38359b8e8135121
Linux

Linux · 2.6.32
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/mac80211/iface.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47714

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47716

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47717

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47718

Affected technology

linux kernel · from 5.6 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · c8e5695eae9959fc5774c0f490f2450be8bad3de to before a0c1e2da652cf70825739bc12d49ea15805690bf, c8e5695eae9959fc5774c0f490f2450be8bad3de to before ceaab3fb64d6a5426a3db8f87f3e5757964f2532, c8e5695eae9959fc5774c0f490f2450be8bad3de to before 7887ad11995a4142671cc49146db536f923c8568, c8e5695eae9959fc5774c0f490f2450be8bad3de to before 1b8178a2ae272256ea0dc4f940320a81003535e2, c8e5695eae9959fc5774c0f490f2450be8bad3de to before 9432185540bafd42b7bfac6e6ef2f0a0fb4be447, c8e5695eae9959fc5774c0f490f2450be8bad3de to before e9a78d9417e167410d6fb83c4e908b077ad8ba6d, c8e5695eae9959fc5774c0f490f2450be8bad3de to before 0e735a4c6137262bcefe45bb52fde7b1f5fc6c4d
Linux

Linux · 5.6
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/net/wireless/realtek/rtw88/main.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47719

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47720

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47721

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47723

Affected technology

linux kernel · from 2.6.12 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d1017d2a0f3f16dc1db5120e7ddbe7c6680425b0, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5ad6284c8d433f8a213111c5c44ead4d9705b622, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0338e66cba272351ca9d7d03f3628e390e70963b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ead82533278502428883085a787d5a00f15e5eb9, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6ce8b6ab44a8b5918c0ee373d4ad19d19017931b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c1ba4b8ca799ff1d99d01f37d7ccb7d5ba5533d2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 128d5cfdcf844cb690c9295a3a1c1114c21fc15a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 96855f40e152989c9e7c20c4691ace5581098acc, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e63866a475562810500ea7f784099bfe341e761a
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/jfs/jfs_dmap.c, fs/jfs/jfs_imap.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47724

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47726

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47727

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47728

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47730

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47731

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47732

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47733

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47734

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47735

Affected technology

linux kernel · from 4.9 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · 9a4435375cd151e07c0c38fa601b00115986091b to before 07f0f643d7e570dbe8ef6f5c3367a43e3086a335, 9a4435375cd151e07c0c38fa601b00115986091b to before 29c0f546d3fd66238b42cf25bcd5f193bb1cf794, 9a4435375cd151e07c0c38fa601b00115986091b to before 425589d4af09c49574bd71ac31f811362a5126c3, 9a4435375cd151e07c0c38fa601b00115986091b to before 094a1821903f33fb91de4b71087773ee16aeb3a0, 9a4435375cd151e07c0c38fa601b00115986091b to before 2656336a84fcb6802f6e6c233f4661891deea24f, 9a4435375cd151e07c0c38fa601b00115986091b to before a1a3403bb1826c8ec787f0d60c3e7b54f419129e, 9a4435375cd151e07c0c38fa601b00115986091b to before 74d315b5af180220d561684d15897730135733a6
Linux

Linux · 4.9
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/infiniband/hw/hns/hns_roce_qp.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47736

Affected technology

linux kernel · from 5.13 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · 8e6c8fa9f2e95c88a642521a5da19a8e31748846 to before c1172e65aad4b115392ea4c6e61e56e5b9b69df4, 8e6c8fa9f2e95c88a642521a5da19a8e31748846 to before 1bf7e414cac303c9aec1be67872e19be8b64980c, 8e6c8fa9f2e95c88a642521a5da19a8e31748846 to before b9b30af0e86ffb485301ecd83b9129c9dfb7ebf8, 8e6c8fa9f2e95c88a642521a5da19a8e31748846 to before 9cfa199bcbbbba31cbf97b2786f44f4464f3f29a, 8e6c8fa9f2e95c88a642521a5da19a8e31748846 to before 9e2f9d34dd12e6e5b244ec488bcebd0c2d566c50
Linux

Linux · 5.13
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/erofs/zdata.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47737

Affected technology

linux kernel · from 3.16 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · ddd1ea56367202f6c99135cd59de7a97af4c4ffd to before 3e8081ebff12bec1347deaceb6bce0765cce54df, ddd1ea56367202f6c99135cd59de7a97af4c4ffd to before c6b16e700cf4d959af524bd9d3978407ff7ce462, ddd1ea56367202f6c99135cd59de7a97af4c4ffd to before 9f03f0016ff797932551881c7e06ae50e9c39134, ddd1ea56367202f6c99135cd59de7a97af4c4ffd to before 9803ab882d565a8fb2dde5999d98866d1c499dfd, ddd1ea56367202f6c99135cd59de7a97af4c4ffd to before 81821617312988096f5deccf0f7da6f888e98056, ddd1ea56367202f6c99135cd59de7a97af4c4ffd to before a1afbbb5276f943ad7173d0b4c626b8c75a260da, ddd1ea56367202f6c99135cd59de7a97af4c4ffd to before e32ee6a61041925d1a05c14d10352dcfce9ef029, ddd1ea56367202f6c99135cd59de7a97af4c4ffd to before 8d0765f86135e27f0bb5c950c136495719b4c834, ddd1ea56367202f6c99135cd59de7a97af4c4ffd to before d078cbf5c38de83bc31f83c47dcd2184c04a50c7
Linux

Linux · 3.16
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

Component: Not specified by the source
File: fs/nfsd/nfs4idmap.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47738

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47739

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47740

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47741

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47742

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47743

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47744

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47745

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47746

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47747

Affected technology

linux kernel · from 4.15 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · 6fd9c53f71862a4797b7ed8a5de80e2c64829f56 to before 25d559ed2beec9b34045886100dac46d1ad92eba, 6fd9c53f71862a4797b7ed8a5de80e2c64829f56 to before b5a84b6c772564c8359a9a0fbaeb2a2944aa1ee9, 6fd9c53f71862a4797b7ed8a5de80e2c64829f56 to before 338a0582b28e69460df03af50e938b86b4206353, 6fd9c53f71862a4797b7ed8a5de80e2c64829f56 to before 822c7bb1f6f8b0331e8d1927151faf8db3b33afd, 6fd9c53f71862a4797b7ed8a5de80e2c64829f56 to before 1c57d61a43293252ad732007c7070fdb112545fd, 6fd9c53f71862a4797b7ed8a5de80e2c64829f56 to before d2abc379071881798d20e2ac1d332ad855ae22f3, 6fd9c53f71862a4797b7ed8a5de80e2c64829f56 to before 516dbc6d16637430808c39568cbb6b841d32b55b, 6fd9c53f71862a4797b7ed8a5de80e2c64829f56 to before 77a77331cef0a219b8dd91361435eeef04cb741c, 6fd9c53f71862a4797b7ed8a5de80e2c64829f56 to before b5109b60ee4fcb2f2bb24f589575e10cc5283ad4
Linux

Linux · 4.15
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
Function: ether3_ledoff, to
File: drivers/net/ethernet/seeq/ether3.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47748

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47749

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47750

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47751

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47752

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47753

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47754

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47756

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47757

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-47794

Affected technology

linux kernel · from 5.6 (inclusive), before 6.12.5 (exclusive)
linux

Linux · be8704ff07d2374bcc5c675526f95e70c6459683 to before f8ba0d22afa613b280fc40fcf6ae99f73c7b36e6, be8704ff07d2374bcc5c675526f95e70c6459683 to before 987aa730bad3e1ef66d9f30182294daa78f6387d, be8704ff07d2374bcc5c675526f95e70c6459683 to before d6083f040d5d8f8d748462c77e90547097df936e
Linux

Linux · 5.6
Linux

Component: Not specified by the source
File: include/linux/bpf.h, kernel/bpf/arraymap.c, kernel/bpf/core.c, kernel/bpf/syscall.c, kernel/bpf/trampoline.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-47809

Affected technology

linux kernel · before 6.6.66 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.5 (exclusive)
linux

Linux · 43279e5376017c40b4be9af5bc79cbb4ef6f53d7 to before e1ffea6bec96d4349dbfcc42ad3e436259f64243, 43279e5376017c40b4be9af5bc79cbb4ef6f53d7 to before 8d55ce46dd543c6965970ce70c22c3076dd35b1e, 43279e5376017c40b4be9af5bc79cbb4ef6f53d7 to before 6fbdc3980b70e9c1c86eccea7d5ee68108008fa7, 43279e5376017c40b4be9af5bc79cbb4ef6f53d7 to before 2db11504ef82a60c1a2063ba7431a5cd013ecfcb, 43279e5376017c40b4be9af5bc79cbb4ef6f53d7 to before b98333c67daf887c724cd692e88e2db9418c0861
Linux

Linux · 2.6.30
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/dlm/lock.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-48873

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-48875

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-48876

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-48881

Affected technology

linux kernel · from 4.19.291 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.251 (inclusive), before 5.4.287 (exclusive)
linux

linux kernel · from 5.10.188 (inclusive), before 5.10.231 (exclusive)
linux

linux kernel · from 5.15.121 (inclusive), before 5.15.174 (exclusive)
linux

linux kernel · from 6.1.39 (inclusive), before 6.1.120 (exclusive)
linux

linux kernel · from 6.4.4 (inclusive), before 6.6.66 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.5 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

Linux · 0729029e647234fa1a94376b6edffec5c2cd75f6 to before 4379c5828492a4c2a651c8f826a01453bd2b80b0, db9439cef0b5efccf8021fe89f4953e0f901e85b to before 336e30f32ae7c043fde0f6fa21586ff30bea9fe2, 991e9c186a8ac6ab272a86e0ddc6f9733c38b867 to before fb5fee35bdd18316a84b5f30881a24e1415e1464, 68118c339c6e1e16ae017bef160dbe28a27ae9c8 to before 5202391970ffbf81975251b3526b890ba027b715, 028ddcac477b691dd9205c92f991cc15259d033e to before cc05aa2c0117e20fa25a3c0d915f98b8f2e78667, 028ddcac477b691dd9205c92f991cc15259d033e to before 5e0e913624bcd24f3de414475018d3023f060ee1, 028ddcac477b691dd9205c92f991cc15259d033e to before b2e382ae12a63560fca35050498e19e760adf8c0, fe75e8a0c20127a8dc95704f1a7ad6b82c9a0ef8, 0cabf9e164660e8d66c4810396046383a1110a69, 5.4.251 to before 5.4.287, 5.10.188 to before 5.10.231, 5.15.121 to before 5.15.174, 6.1.39 to before 6.1.120, 4.19.291 to before 4.20, 6.4.4 to before 6.5
Linux

Linux · 6.5
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/md/bcache/super.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49568

Affected technology

linux kernel · from 5.10 (inclusive), before 6.6.68 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.7 (exclusive)
linux

linux kernel · 6.13 · update rc1
linux

linux kernel · 6.13 · update rc2
linux

linux kernel · 6.13 · update rc3
linux

Linux · 8c3dca341aea885249e08856c4380300b75d2cf5 to before 9cc0170ae646876aa5de2f0cad3066ce53e86f27, 8c3dca341aea885249e08856c4380300b75d2cf5 to before 49798283fce4c1a24fb1ba4c7c39127739535571, 8c3dca341aea885249e08856c4380300b75d2cf5 to before 690b9a8db9460d065785548e43fd6a02d247c1b7, 8c3dca341aea885249e08856c4380300b75d2cf5 to before 295a92e3df32e72aff0f4bc25c310e349d07ffbf, 8c3dca341aea885249e08856c4380300b75d2cf5 to before 42f6beb2d5779429417b5f8115a4e3fa695d2a6c, 8c3dca341aea885249e08856c4380300b75d2cf5 to before 7863c9f3d24ba49dbead7e03dfbe40deb5888fdf
Linux

Linux · 5.10
Linux

Component: Not specified by the source
File: net/smc/af_smc.c, net/smc/smc_clc.c, net/smc/smc_clc.h

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49569

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49571

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49850

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49851

Affected technology

linux kernel · from 4.12 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.54 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.13 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.2 (exclusive)
linux

Linux · 745b361e989af21ad40811c2586b60229f870a68 to before 87e8134c18977b566f4ec248c8a147244da69402, 745b361e989af21ad40811c2586b60229f870a68 to before 2c9b228938e9266a1065a3f4fe5c99b7235dc439, 745b361e989af21ad40811c2586b60229f870a68 to before ebc4e1f4492d114f9693950621b3ea42b2f82bec, 745b361e989af21ad40811c2586b60229f870a68 to before c84ceb546f30432fccea4891163f7050f5bee5dd, 745b361e989af21ad40811c2586b60229f870a68 to before 82478cb8a23bd4f97935bbe60d64528c6d9918b4, 745b361e989af21ad40811c2586b60229f870a68 to before adf4ce162561222338cf2c9a2caa294527f7f721, 745b361e989af21ad40811c2586b60229f870a68 to before 3f9f72d843c92fb6f4ff7460d774413cde7f254c, 745b361e989af21ad40811c2586b60229f870a68 to before e3aaebcbb7c6b403416f442d1de70d437ce313a7
Linux

Linux · 4.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/char/tpm/tpm-dev-common.c, drivers/char/tpm/tpm2-space.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49852

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49853

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49855

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49856

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49857

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49858

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49859

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49860

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49861

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49862

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49863

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49864

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49865

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49866

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49867

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49868

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49869

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49870

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49871

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49872

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49873

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49874

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49875

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49876

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49877

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49878

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49879

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49880

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49881

Affected technology

linux kernel · from 3.18 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · 10809df84a4d868db61af621bae3658494165279 to before ec0c0beb9b777cdd1edd7df9b36e0f3e67e2bdff, 10809df84a4d868db61af621bae3658494165279 to before 6766937d0327000ac1b87c97bbecdd28b0dd6599, 10809df84a4d868db61af621bae3658494165279 to before a9fcb1717d75061d3653ed69365c8d45331815cd, 10809df84a4d868db61af621bae3658494165279 to before 6801ed1298204d16a38571091e31178bfdc3c679, 10809df84a4d868db61af621bae3658494165279 to before f55ecc58d07a6c1f6d6d5b5af125c25f8da0bda2, 10809df84a4d868db61af621bae3658494165279 to before b63481b3a388ee2df9e295f97273226140422a42, 10809df84a4d868db61af621bae3658494165279 to before 11b230100d6801c014fab2afabc8bdea304c1b96, 10809df84a4d868db61af621bae3658494165279 to before 5b4b2dcace35f618fe361a87bae6f0d13af31bc1
Linux

Linux · 3.18
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: fs/ext4/extents.c, fs/ext4/move_extent.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49882

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49883

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49884

Affected technology

debian linux · 11.0
debian

linux kernel · from 3.18 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.290 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · dfe5080939ea4686b3414b5d970a9b26733c57a4 to before 393a46f60ea4f249dc9d496d4eb2d542f5e11ade, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before 448100a29395b0c8b4c42967155849fe0fbe808f, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before e52f933598b781d291b9297e39c463536da0e185, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before cafcc1bd62934547c76abf46c6d0d54f135006fe, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before a5401d4c3e2a3d25643c567d26e6de327774a2c9, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before 8fe117790b37c84c651e2bad9efc0e7fda73c0e3, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before 5d949ea75bb529ea6342e83465938a3b0ac51238, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before 915ac3630488af0ca194dc63b86d99802b4f6e18, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before c26ab35702f8cd0cdc78f96aa5856bfb77be798f
Linux

Linux · 3.18
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: fs/ext4/extents.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49885

Affected technology

linux kernel · from 6.2 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · 946fa0dbf2d8923a587f7348adf16563d59f1b3d to before 7299868253c0e8ba9bf31f6e5198e8eafa1e700b, 946fa0dbf2d8923a587f7348adf16563d59f1b3d to before 7a2e823a19746d54052c625faecf0d2d6c52ee0a, 946fa0dbf2d8923a587f7348adf16563d59f1b3d to before 83f0440b2f92227fcce9898118ca7fe7e0d64b1f, 946fa0dbf2d8923a587f7348adf16563d59f1b3d to before 59090e479ac78ae18facd4c58eb332562a23020e
Linux

Linux · 6.2
Linux

Component: Not specified by the source
File: mm/slub.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49886

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49887

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49888

Affected technology

linux kernel · before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · ec0e2da95f72d4a46050a4d994e4fe471474fd80 to before 45f2bbe7bc08d716a07a40025c672cad93180903, ec0e2da95f72d4a46050a4d994e4fe471474fd80 to before 4902a6a0dc593c82055fc8c9ada371bafe26c9cc, ec0e2da95f72d4a46050a4d994e4fe471474fd80 to before d22e45a369afc7c28f11acfa5b5e8e478227ca5d, ec0e2da95f72d4a46050a4d994e4fe471474fd80 to before 7dd34d7b7dcf9309fc6224caf4dd5b35bedddcb7
Linux

Linux · 6.6
Linux

Component: Not specified by the source
File: kernel/bpf/verifier.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49889

Affected technology

linux kernel · before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · dfe5080939ea4686b3414b5d970a9b26733c57a4 to before b0cb4561fc4284d04e69c8a66c8504928ab2484e, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before 4999fed877bb64e3e7f9ab9996de2ca983c41928, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before 2eba3b0cc5b8de624918d21f32b5b8db59a90b39, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before 34b2096380ba475771971a778a478661a791aa15, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before 8b114f2cc7dd5d36729d040b68432fbd0f0a8868, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before d483c7cc1796bd6a80e7b3a8fd494996260f6b67, dfe5080939ea4686b3414b5d970a9b26733c57a4 to before 4e2524ba2ca5f54bdbb9e5153bea00421ef653f5
Linux

Linux · 3.18
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: fs/ext4/extents.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49890

Affected technology

linux kernel · before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · 3bace359149391c6547cefe3bf729f365bcf3ef6 to before 29f388945770bd0a6c82711436b2bc98b0dfac92, 3bace359149391c6547cefe3bf729f365bcf3ef6 to before 9550d8d6f19fac7623f044ae8d9503825b325497, 3bace359149391c6547cefe3bf729f365bcf3ef6 to before fd5f4ac1a986f0e7e9fa019201b5890554f87bcf, 3bace359149391c6547cefe3bf729f365bcf3ef6 to before b511474f49588cdca355ebfce54e7eddbf7b75a5, 3bace359149391c6547cefe3bf729f365bcf3ef6 to before 8adf4408d482faa51b2c14e60bfd9946ec1911a4, 3bace359149391c6547cefe3bf729f365bcf3ef6 to before 016bf0294b401246471c6710c6bf9251616228b6, 3bace359149391c6547cefe3bf729f365bcf3ef6 to before 186fb12e7a7b038c2710ceb2fb74068f1b5d55a4
Linux

Linux · 4.5
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/gpu/drm/amd/pm/powerplay/hwmgr/processpptables.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49891

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49892

Affected technology

linux kernel · before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 8f0abb39c16e719129de10596b3ae3363fa178b4, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before f921335123f6620c3dce5c96fbb95f18524a021c, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 1f9f8186e239222f1c8d3dd73bf3bc6ae86c5e76, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before a23d6029e730f8a151b1a34afb169baac1274583, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before c7630935d9a4986e8c0ed91658a781b7a77d73f7, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before bc00d211da4ffad5314a2043b50bdc8ff8a33724, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 3334ab72cbba55a632f24579cd47c4a4e5e69cda, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 4067f4fa0423a89fb19a30b57231b384d77d2610
Linux

Linux · 4.15
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/gpu/drm/amd/display/dc/dml/dcn20/display_rq_dlg_calc_20v2.c, drivers/gpu/drm/amd/display/dc/dml/dcn21/display_rq_dlg_calc_21.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49893

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49894

Affected technology

simatic s7-1500 tm mfp firmware · 1.1
siemens

debian linux · 11.0
debian

linux kernel · from 4.15 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

sinec os · before 3.2 (exclusive)
siemens

Linux · 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before b3dfa878257a7e98830b3009ca5831a01d8f85fc, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before f5f6d90087131812c1e4b9d3103f400f1624396d, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before c130a3c09e3746c1a09ce26c20d21d449d039b1d, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before c6979719012a90e5b8e3bc31725fbfdd0b9b2b79, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 2495c8e272d84685403506833a664fad932e453a, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 122e3a7a8c7bcbe3aacddd6103f67f9f36bed473, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 2f5da549535be8ccd2ab7c9abac8562ad370b181, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 07078fa5d589a7fbce8f81ea8acf7aa0021ab38e, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before b7e99058eb2e86aabd7a10761e76cae33d22b49f
Linux

Linux · 4.15
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
Function: points, returns
File: drivers/gpu/drm/amd/display/dc/dcn10/dcn10_cm_common.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49895

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49896

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49898

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49899

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49900

Affected technology

linux kernel · before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7b24d41d47a6805c45378debf8bd115675d41da8, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before dac398ed272a378d2f42ac68ae408333a51baf52, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8b1dcf25c26d42e4a68c4725ce52a0543c7878cc, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d7444f91a9f93eaa48827087ed0f3381c194181d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6041536d18c5f51a84bc37cd568cbab61870031e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c076b3746224982eebdba5c9e4b1467e146c0d64, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7c244d5b48284a770d96ff703df2dfeadf804a73, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8ad8b531de79c348bcb8133e7f5e827b884226af, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2b59ffad47db1c46af25ccad157bb3b25147c35c
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/jfs/xattr.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49901

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49902

Affected technology

linux kernel · before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d76b9a4c283c7535ae7c7c9b14984e75402951e1, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 35b91f15f44ce3c01eba058ccb864bb04743e792, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2451e5917c56be45d4add786e2a059dd9c2c37c4, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 25d2a3ff02f22e215ce53355619df10cc5faa7ab, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 058aa89b3318be3d66a103ba7c68d717561e1dc6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7fff9a9f866e99931cf6fa260288e55d01626582, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cb0eb10558802764f07de1dc439c4609e27cb4f0, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4a7bf6a01fb441009a6698179a739957efd88e38, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d64ff0d2306713ff084d4b09f84ed1a8c75ecc32
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/jfs/jfs_dmap.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49903

Affected technology

linux kernel · before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · b40c2e665cd552eae5fbdbb878bc29a34357668e to before 4ac58f7734937f3249da734ede946dfb3b1af5e4, b40c2e665cd552eae5fbdbb878bc29a34357668e to before 3126ccde51f51b0648c8cdccaf916e8bd062e972, b40c2e665cd552eae5fbdbb878bc29a34357668e to before fd026b6b6758d5569705c02540b40f3bbf822b9a, b40c2e665cd552eae5fbdbb878bc29a34357668e to before e7ae14f7ee76c6ef5a48aebab1a278ad78f42619, b40c2e665cd552eae5fbdbb878bc29a34357668e to before 0c238da83f56bb895cab1e5851d034ac45b158d1, b40c2e665cd552eae5fbdbb878bc29a34357668e to before 4218b31ecc7af7e191768d32e32ed4386d8f9b76, b40c2e665cd552eae5fbdbb878bc29a34357668e to before a9603a6f75df2fd8125cd208c98cfaa0fe3f7505, b40c2e665cd552eae5fbdbb878bc29a34357668e to before 95accb7183badca387f7a8d19a2475cf3089f148, b40c2e665cd552eae5fbdbb878bc29a34357668e to before d6c1b3599b2feb5c7291f5ac3a36e5fa7cedb234
Linux

Linux · 3.7
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/jfs/jfs_discard.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49905

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49906

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49907

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49909

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49911

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49912

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49913

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49914

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49915

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49917

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49918

Affected technology

linux kernel · before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 180280f3c4621d699d903773bb84bf7f0bc6a891, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 4f47292f488fa7041284dca1f1244116c18721f1, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 96d4c2ee18d732a248d053aae8c4a27cb1d68d1c, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before ac2140449184a26eac99585b7f69814bd3ba8f2d
Linux

Linux · 4.15
Linux

Component: Not specified by the source
Function: returns
File: drivers/gpu/drm/amd/display/dc/resource/dcn32/dcn32_resource.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49919

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49920

Affected technology

linux kernel · before 6.11.3 (exclusive)
linux

Linux · 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 4f51f6d23c5856f105110531f81d84e78e462005, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 26787fb6c2b2ee0d1a7e1574b36f4711ae40fe27, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before fdd5ecbbff751c3b9061d8ebb08e5c96119915b4
Linux

Linux · 4.15
Linux

Component: Not specified by the source
File: drivers/gpu/drm/amd/display/dc/core/dc_hw_sequencer.c, drivers/gpu/drm/amd/display/dc/hwss/dcn20/dcn20_hwseq.c, drivers/gpu/drm/amd/display/dc/link/accessories/link_dp_cts.c, drivers/gpu/drm/amd/display/dc/link/hwss/link_hwss_dio.c, drivers/gpu/drm/amd/display/dc/resource/dce112/dce112_resource.c, drivers/gpu/drm/amd/display/dc/resource/dcn32/dcn32_resource.c, drivers/gpu/drm/amd/display/dc/resource/dcn32/dcn32_resource_helpers.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49921

Affected technology

linux kernel · before 6.11.3 (exclusive)
linux

Linux · 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 692e9a20018da7aa225d8dced44803f9852aca81, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 5b35bf1a82eb29841b67ff5643ba83762250fc24, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before be1fb44389ca3038ad2430dac4234669bc177ee3
Linux

Linux · 4.15
Linux

Component: Not specified by the source
File: drivers/gpu/drm/amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c, drivers/gpu/drm/amd/display/dc/hubp/dcn10/dcn10_hubp.c, drivers/gpu/drm/amd/display/dc/hubp/dcn20/dcn20_hubp.c, drivers/gpu/drm/amd/display/dc/hwss/dce110/dce110_hwseq.c, drivers/gpu/drm/amd/display/dc/hwss/dcn10/dcn10_hwseq.c, drivers/gpu/drm/amd/display/dc/hwss/dcn31/dcn31_hwseq.c, drivers/gpu/drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c, drivers/gpu/drm/amd/display/dc/link/protocols/link_dp_capability.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49922

Affected technology

linux kernel · before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 336bc3461b1c74e085bb0f2e1488df4dcc6dc983, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 65e1d2c291553ef3f433a0b7109cc3002a5f40ae, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 5e9386baa3033c369564d55de4bab62423e8a1d3, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 1ff12bcd7deaeed25efb5120433c6a45dd5504a8
Linux

Linux · 4.15
Linux

Component: Not specified by the source
File: drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49923

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49924

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49925

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49926

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49927

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49928

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49929

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49930

Affected technology

linux kernel · before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · d5c65159f2895379e11ca13f62feabe93278985d to before 0f26f26944035ec67546a944f182cbad6577a9c0, d5c65159f2895379e11ca13f62feabe93278985d to before 4dd732893bd38cec51f887244314e2b47f0d658f, d5c65159f2895379e11ca13f62feabe93278985d to before 73e235728e515faccc104b0153b47d0f263b3344, d5c65159f2895379e11ca13f62feabe93278985d to before 7a552bc2f3efe2aaf77a85cb34cdf4a63d81a1a7, d5c65159f2895379e11ca13f62feabe93278985d to before 6045ef5b4b00fee3629689f791992900a1c94009, d5c65159f2895379e11ca13f62feabe93278985d to before 01b77f5ee11c89754fb836af8f76799d3b72ae2f, d5c65159f2895379e11ca13f62feabe93278985d to before 69f253e46af98af17e3efa3e5dfa72fcb7d1983d
Linux

Linux · 5.6
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
Function: access
File: drivers/net/wireless/ath/ath11k/dp_rx.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49931

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49932

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49933

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49934

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49935

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49936

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49937

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49938

Affected technology

linux kernel · before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · fb9987d0f748c983bb795a86f47522313f701a08 to before e6b9bf32e0695e4f374674002de0527d2a6768eb, fb9987d0f748c983bb795a86f47522313f701a08 to before d1f2fbc6a769081503f6ffedbb5cd1ac497f0e77, fb9987d0f748c983bb795a86f47522313f701a08 to before b02eb7c86ff2ef1411c3095ec8a52b13f68db04f, fb9987d0f748c983bb795a86f47522313f701a08 to before 012ae530afa0785102360de452745d33c99a321b, fb9987d0f748c983bb795a86f47522313f701a08 to before 6a875220670475d9247e576c15dc29823100a4e4, fb9987d0f748c983bb795a86f47522313f701a08 to before e37e348835032d6940ec89308cc8996ded691d2d, fb9987d0f748c983bb795a86f47522313f701a08 to before 2c230210ec0ae6ed08306ac70dc21c24b817bb95, fb9987d0f748c983bb795a86f47522313f701a08 to before a9f4e28e8adaf0715bd4e01462af0a52ee46b01f, fb9987d0f748c983bb795a86f47522313f701a08 to before 94745807f3ebd379f23865e6dab196f220664179
Linux

Linux · 2.6.35
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/net/wireless/ath/ath9k/hif_usb.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49939

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49940

Affected technology

linux kernel · before 6.11.3 (exclusive)
linux

Linux · 3953ae7b218df4d1e544b98a393666f9ae58a78c to before 98691b2e28a6c3dac0680914493d54c77f215755, 3953ae7b218df4d1e544b98a393666f9ae58a78c to before f7415e60c25a6108cd7955a20b2e66b6251ffe02, 3953ae7b218df4d1e544b98a393666f9ae58a78c to before 24256415d18695b46da06c93135f5b51c548b950, b102bfc2a90d14f342580285782a9a51c74f7369, 10c15ddabbcf888922adbdd44ca3fecf6eab19d9, 8d1c650d452c53fcb3f02a7b1d772741639f89a4, 12b5fb58ac993c24210cf8cbc72d407d3a4e6490, aef37401b467a0b1a9517c69924a1d66937e0789, 3.2.99 to before 3.3, 3.16.54 to before 3.17, 4.4.225 to before 4.5, 4.9.225 to before 4.10, 4.14.182 to before 4.15
Linux

Linux · 4.15
Linux

Component: Not specified by the source
File: net/l2tp/l2tp_core.c, net/l2tp/l2tp_core.h, net/l2tp/l2tp_netlink.c, net/l2tp/l2tp_ppp.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49941

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49942

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49943

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49944

Affected technology

linux kernel · from 2.6.30 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

Linux · 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before 89bbead9d897c77d0b566349c8643030ff2abeba, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before 0e4e2e60556c6ed00e8450b720f106a268d23062, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before dd70c8a89ef99c3d53127fe19e51ef47c3f860fa, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before e7a8442195e8ebd97df467ce4742980ab57edcce, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before 9230a59eda0878d7ecaa901d876aec76f57bd455, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before 7f64cb5b4d8c872296eda0fdce3bcf099eec7aa7, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before f032e1dac30b3376c7d6026fb01a8c403c47a80d, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before e914bf68dab88815a7ae7b7a3a5e8913c8ff14a5, 5e8f3f703ae4e4af65e2695e486b3cd198328863 to before 8beee4d8dee76b67c75dc91fd8185d91e845c160
Linux

Linux · 2.6.30
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/sctp/socket.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49945

Affected technology

linux kernel · from 4.8 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

Linux · 2d283bdd079c0ad4da020bbc9e9c2a4280823098 to before 64704f231d5dee8639e256507178f43dde1f131c, 2d283bdd079c0ad4da020bbc9e9c2a4280823098 to before f6ca58696749268181f43150b3553f2bafd71e42, 2d283bdd079c0ad4da020bbc9e9c2a4280823098 to before dd41dab62f32d9e9e0669af8459d12a93834b238, 2d283bdd079c0ad4da020bbc9e9c2a4280823098 to before a0ffa68c70b367358b2672cdab6fa5bc4c40de2c
Linux

Linux · 4.8
Linux

Component: Not specified by the source
Function: can
File: net/ncsi/ncsi-manage.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49946

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49947

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49948

Affected technology

linux kernel · from 3.9 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

Linux · 1def9238d4aa2146924994aa4b7dc861f03b9362 to before d7d1a28f5dd57b4d83def876f8d7b4403bd37df9, 1def9238d4aa2146924994aa4b7dc861f03b9362 to before 473426a1d53a68dd1e718e6cd00d57936993fa6c, 1def9238d4aa2146924994aa4b7dc861f03b9362 to before 566a931a1436d0e0ad13708ea55479b95426213c, 1def9238d4aa2146924994aa4b7dc861f03b9362 to before 2415f465730e48b6e38da1c7c097317bf5dd2d20, 1def9238d4aa2146924994aa4b7dc861f03b9362 to before 27a8fabc54d2f960d47bdfbebf2bdc6e8a92a4c4, 1def9238d4aa2146924994aa4b7dc861f03b9362 to before 9b0ee571d20a238a22722126abdfde61f1b2bdd0, 1def9238d4aa2146924994aa4b7dc861f03b9362 to before ff1c3cadcf405ab37dd91418a62a7acecf3bc5e2, 1def9238d4aa2146924994aa4b7dc861f03b9362 to before 1eebe602a8d8264a12e35e39d0645fa88dbbacdd, 1def9238d4aa2146924994aa4b7dc861f03b9362 to before ab9a9a9e9647392a19e7a885b08000e89c86b535
Linux

Linux · 3.9
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/core/dev.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49949

Affected technology

linux kernel · from 4.14.256 (inclusive), before 4.19 (exclusive)
linux

linux kernel · from 4.19.218 (inclusive), before 5.4 (exclusive)
linux

linux kernel · from 5.4.162 (inclusive), before 5.10 (exclusive)
linux

linux kernel · from 5.10.82 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.15.5 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

Linux · 960b360ca7463921c1a6b72e7066a706d6406223 to before d70ca7598943572d5e384227bd268acb5109bf72, fb2dbc124a7f800cd0e4f901a1bbb769a017104c to before 1598d70ad9c7d0a4d9d54b82094e9f45908fda6d, 8e6bae950da9dc2d2c6c18b1c6b206dc00dc8772 to before ba26060a29d3ca1bfc737aa79f7125128f35147c, 0f810d06b507aa40fef8d1ac0a88e6d0590dbfc3 to before 939c88cbdc668dadd8cfa7a35d9066331239041c, cf9acc90c80ecbee00334aa85d92f4e74014bcff to before d6114993e0a89fde84a60a60a8329a571580b174, cf9acc90c80ecbee00334aa85d92f4e74014bcff to before 25ab0b87dbd89cecef8a9c60a02bb97832e471d1, cf9acc90c80ecbee00334aa85d92f4e74014bcff to before f959cce8a2a04ce776aa8b78e83ce339e0d7fbac, cf9acc90c80ecbee00334aa85d92f4e74014bcff to before 81fd007dcd47c34471766249853e4d4bce8eea4b, cf9acc90c80ecbee00334aa85d92f4e74014bcff to before c20029db28399ecc50e556964eaba75c43b1e2f1, 2128303bff700c857739a0af8cc39c1a41840650, 4.19.218 to before 4.19.323, 5.4.162 to before 5.4.285, 5.10.82 to before 5.10.227, 5.15.5 to before 5.15.168, 4.14.256 to before 4.15
Linux

Linux · 5.16
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/core/dev.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49950

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49951

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49952

Affected technology

linux kernel · from 4.3 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

Linux · d877f07112f1e5a247c6b585c971a93895c9f738 to before 50067d8b3f48e4cd4c9e817d3e9a5b5ff3507ca7, d877f07112f1e5a247c6b585c971a93895c9f738 to before c0add6ed2cf1c4733cd489efc61faeccd3433b41, d877f07112f1e5a247c6b585c971a93895c9f738 to before 531754952f5dfc4b141523088147071d6e6112c4, d877f07112f1e5a247c6b585c971a93895c9f738 to before 38e3fd0c4a2616052eb3c8f4e6f32d1ff47cd663, d877f07112f1e5a247c6b585c971a93895c9f738 to before b40b027a0c0cc1cb9471a13f9730bb2fff12a15b, d877f07112f1e5a247c6b585c971a93895c9f738 to before 4e3542f40f3a94efa59ea328e307c50601ed7065, d877f07112f1e5a247c6b585c971a93895c9f738 to before f839c5cd348201fec440d987cbca9b979bdb4fa7, d877f07112f1e5a247c6b585c971a93895c9f738 to before 752e1924604254f1708f3e3700283a86ebdd325d, d877f07112f1e5a247c6b585c971a93895c9f738 to before 92ceba94de6fb4cee2bf40b485979c342f44a492
Linux

Linux · 4.3
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/ipv4/netfilter/nf_dup_ipv4.c, net/ipv6/netfilter/nf_dup_ipv6.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49953

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49954

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49955

Affected technology

linux kernel · from 4.17 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

Linux · fa93854f7a7ed63d054405bf3779247d5300edd3 to before 76fb2cbf01571926da8ecf6876cc8cb07d3f5183, fa93854f7a7ed63d054405bf3779247d5300edd3 to before c47843a831e0eae007ad7e848d208e675ba4c132, fa93854f7a7ed63d054405bf3779247d5300edd3 to before da964de4c18199e14b961b5b2e5e6570552a313c, fa93854f7a7ed63d054405bf3779247d5300edd3 to before 07b98400cb0285a6348188aa8c5ec6a2ae0551f7, fa93854f7a7ed63d054405bf3779247d5300edd3 to before ca1fb7942a287b40659cc79551a1de54a2c2e7d5, fa93854f7a7ed63d054405bf3779247d5300edd3 to before ce31847f109c3a5b2abdd19d7bcaafaacfde53de, fa93854f7a7ed63d054405bf3779247d5300edd3 to before ca26e8eed9c1c6651f51f7fa38fe444f8573cd1b, fa93854f7a7ed63d054405bf3779247d5300edd3 to before 9f469ef1c79dac7f9ac1518643a33703918f7e13, fa93854f7a7ed63d054405bf3779247d5300edd3 to before 76959aff14a0012ad6b984ec7686d163deccdc16
Linux

Linux · 4.17
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/acpi/battery.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49956

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49957

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49958

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49959

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49960

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49961

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49962

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49963

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49964

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49965

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49966

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49968

Affected technology

linux kernel · before 6.11.3 (exclusive)
linux

Linux · 471fbbea7ff7061b2d6474665cb5a2ceb4fd6500 to before 86b81d4eab1cd4c56f7447896232cf33472c2395, 471fbbea7ff7061b2d6474665cb5a2ceb4fd6500 to before 11bd1c279bac701ba91119875796ffff3b98250e, 471fbbea7ff7061b2d6474665cb5a2ceb4fd6500 to before 52c4538a92da6f3242d4140c03ddc5ee71b39ba8, 471fbbea7ff7061b2d6474665cb5a2ceb4fd6500 to before e1373903db6c4ac994de0d18076280ad88e12dee, 471fbbea7ff7061b2d6474665cb5a2ceb4fd6500 to before 985b67cd86392310d9e9326de941c22fc9340eec
Linux

Linux · 5.13
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: fs/ext4/super.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49969

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49970

Affected technology

linux kernel · before 6.11.3 (exclusive)
linux

Linux · 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before 00872dcc2a3e4a42155c2f3b7f21952a62301035, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before b219b46ad42df1dea9258788bcfea37181f3ccb2, 4562236b3bc0a28aeb6ee93b2d8a849a4c4e1c7c to before bdf606810210e8e07a0cdf1af3c467291363b295
Linux

Linux · 4.15
Linux

Component: Not specified by the source
File: drivers/gpu/drm/amd/display/dc/resource/dcn401/dcn401_resource.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49971

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49972

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49973

Affected technology

linux kernel · from 5.4 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · f1bce4ad2f1cee6759711904b9fffe4a3dd8af87 to before 64648ae8c97ec5a3165021627f5a1658ebe081ca, f1bce4ad2f1cee6759711904b9fffe4a3dd8af87 to before 991e8b0bab669b7d06927c3e442b3352532e8581, f1bce4ad2f1cee6759711904b9fffe4a3dd8af87 to before 21950321ad33d7613b1453f4c503d7b1871deb61, f1bce4ad2f1cee6759711904b9fffe4a3dd8af87 to before fe44b3bfbf0c74df5712f44458689d0eccccf47d, f1bce4ad2f1cee6759711904b9fffe4a3dd8af87 to before 1c723d785adb711496bc64c24240f952f4faaabf, f1bce4ad2f1cee6759711904b9fffe4a3dd8af87 to before 92bc8647b4d65f4d4bf8afdb206321c1bc55a486, f1bce4ad2f1cee6759711904b9fffe4a3dd8af87 to before 585c048d15ed559f20cb94c8fa2f30077efa4fbc, f1bce4ad2f1cee6759711904b9fffe4a3dd8af87 to before ced8e8b8f40accfcce4a2bbd8b150aa76d5eff9a
Linux

Linux · 5.4
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/net/ethernet/realtek/r8169_main.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49974

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49975

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49976

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49977

Affected technology

linux kernel · from 5.10.221 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.15.162 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 6.1.96 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.6.36 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.9.7 (inclusive), before 6.10 (exclusive)
linux

linux kernel · from 6.10 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · b4bca4722fda928810d024350493990de39f1e40 to before e33fe25b1efe4f2e6a5858786dbc82ae4c44ed4c, 2145583e5995598f50d66f8710c86bb1e910ac46 to before b0da9504a528f05f97d926b4db74ff21917a33e9, 521d42a1c24d638241220d4b9fa7e7a0ed02b88e to before 5d43e1ad4567d67af2b42d3ab7c14152ffed25c6, a71b686418ee6bcb6d6365f7f6d838d9874d9c64 to before 03582f4752427f60817d896f1a827aff772bd31e, b8c43360f6e424131fa81d3ba8792ad8ff25a09e to before e297a2bf56d12fd7f91a0c209eb6ea84361f3368, b8c43360f6e424131fa81d3ba8792ad8ff25a09e to before 837d9df9c0792902710149d1a5e0991520af0f93, b8c43360f6e424131fa81d3ba8792ad8ff25a09e to before 675faf5a14c14a2be0b870db30a70764df81e2df, f01782804147a8c21f481b3342c83422c041d2c0, 5.10.221 to before 5.10.227, 5.15.162 to before 5.15.168, 6.1.96 to before 6.1.113, 6.6.36 to before 6.6.55, 6.9.7 to before 6.10
Linux

Linux · 6.10
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
Function: when
File: drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49978

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49979

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49980

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49981

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49982

Affected technology

linux kernel · from 5.10.214 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.15.153 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 6.1.83 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.6.23 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7.11 (inclusive), before 6.8.2 (exclusive)
linux

linux kernel · from 6.9 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

linux kernel · 4.19.311
linux

linux kernel · 5.4.273
linux

linux kernel · 6.12 · update rc1
linux

Linux · ad80c34944d7175fa1f5c7a55066020002921a99 to before 12f7b89dd72b25da4eeaa22097877963cad6418e, 1a54aa506b3b2f31496731039e49778f54eee881 to before a786265aecf39015418e4f930cc1c14603a01490, faf0b4c5e00bb680e8e43ac936df24d3f48c8e65 to before f63461af2c1a86af4217910e47a5c46e3372e645, 7dd09fa80b0765ce68bfae92f4e2f395ccf0fba4 to before 07b418d50ccbbca7e5d87a3a0d41d436cefebf79, 74ca3ef68d2f449bc848c0a814cefc487bf755fa to before bc2cbf7525ac288e07d465f5a1d8cb8fb9599254, eb48680b0255a9e8a9bdc93d6a55b11c31262e62 to before acc5103a0a8c200a52af7d732c36a8477436a3d3, f98364e926626c678fb4b9004b75cacf92ff0662 to before 89d9a69ae0c667e4d9d028028e2dcc837bae626f, f98364e926626c678fb4b9004b75cacf92ff0662 to before 8253a60c89ec35c8f36fb2cc08cdf854c7a3eb58, f98364e926626c678fb4b9004b75cacf92ff0662 to before 6d6e54fc71ad1ab0a87047fd9c211e75d86084a3, 079cba4f4e307c69878226fdf5228c20aa1c969c, a16fbb80064634b254520a46395e36b87ca4731e, 4.19.311 to before 4.19.323, 5.4.273 to before 5.4.285, 5.10.214 to before 5.10.227, 5.15.153 to before 5.15.168, 6.1.83 to before 6.1.113, 6.6.23 to before 6.6.55, 6.7.11 to before 6.8, 6.8.2 to before 6.9
Linux

Linux · 6.9
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/block/aoe/aoecmd.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49983

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49985

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49986

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49987

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49988

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49989

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49991

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49992

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49994

Affected technology

linux kernel · before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · 44abff2c0b970ae3d310b97617525dc01f248d7c to before 8476f8428e8b48fd7a0e4258fa2a96a8f4468239, 44abff2c0b970ae3d310b97617525dc01f248d7c to before a99bacb35c1416355eef957560e8fcac3a665549, 44abff2c0b970ae3d310b97617525dc01f248d7c to before 0842ddd83939eb4db940b9af7d39e79722bc41aa, 44abff2c0b970ae3d310b97617525dc01f248d7c to before 6c9915fa9410cbb9bd75ee283c03120046c56d3d, 44abff2c0b970ae3d310b97617525dc01f248d7c to before 697ba0b6ec4ae04afb67d3911799b5e2043b4455
Linux

Linux · 5.19
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: block/ioctl.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49995

Affected technology

Rejected reason: This CVE ID · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49996

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-49997

Affected technology

linux kernel · from 3.0 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

Linux · 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 905f06a34f960676e7dc77bea00f2f8fe18177ad, 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 60c068444c20bf9a3e22b65b5f6f3d9edc852931, 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 185df159843d30fb71f821e7ea4368c2a3bfcd36, 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 469856f76f4802c5d7e3d20e343185188de1e2db, 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 2bf4c101d7c99483b8b15a0c8f881e3f399f7e18, 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before e66e38d07b31e177ca430758ed97fbc79f27d966, 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 1097bf16501ed5e35358d848b0a94ad2830b0f65, 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 431b122933b197820d319eb3987a67d04346ce9e, 504d4721ee8e432af4b5f196a08af38bc4dac5fe to before 45c0de18ff2dc9af01236380404bbd6a46502c69
Linux

Linux · 3.0
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
Function: zeroes
File: drivers/net/ethernet/lantiq_etop.c

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality impact as high; integrity and availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49998

Affected technology

linux kernel · from 5.15.155 (inclusive), before 5.16 (exclusive)
linux

linux kernel · from 5.16.10 (inclusive), before 5.17 (exclusive)
linux

linux kernel · from 5.17 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

Linux · ff45899e732e57088985e3a497b1d9100571c0f5 to before 87bd909a7014e32790e8c759d5b7694a95778ca5, ee534378f00561207656663d93907583958339ae to before ab9e90619b6339becc5415647ae154a9a46a044d, ee534378f00561207656663d93907583958339ae to before 2e93bf719462ac6d23c881c8b93e5dc9bf5ab7f5, ee534378f00561207656663d93907583958339ae to before ab5d3420a1120950703dbdc33698b28a6ebc3d23, ee534378f00561207656663d93907583958339ae to before b4a65d479213fe84ecb14e328271251eebe69492, ee534378f00561207656663d93907583958339ae to before 6c24a03a61a245fe34d47582898331fa034b6ccd, 89b60402d43cdab4387dbbf24afebda5cf092ae7, 5.15.155 to before 5.15.176, 5.16.10 to before 5.17
Linux

Linux · 5.17
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: is
File: net/dsa/dsa.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-49999

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50000

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50001

Affected technology

linux kernel · from 5.10 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

Linux · 5af75c747e2a868abbf8611494b50ed5e076fca7 to before ca36d6c1a49b6965c86dd528a73f38bc62d9c625, 5af75c747e2a868abbf8611494b50ed5e076fca7 to before ce828b347cf1b3c1b12b091d02463c35ce5097f5, 5af75c747e2a868abbf8611494b50ed5e076fca7 to before fc357e78176945ca7bcacf92ab794b9ccd41b4f4, 5af75c747e2a868abbf8611494b50ed5e076fca7 to before 26fad69b34fcba80d5c7d9e651f628e6ac927754, 5af75c747e2a868abbf8611494b50ed5e076fca7 to before ecf310aaf256acbc8182189fe0aa1021c3ddef72, 5af75c747e2a868abbf8611494b50ed5e076fca7 to before 8bb8c12fb5e2b1f03d603d493c92941676f109b5, 5af75c747e2a868abbf8611494b50ed5e076fca7 to before 2bcae12c795f32ddfbf8c80d1b5f1d3286341c32
Linux

Linux · 5.10
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
Function: now, in
File: drivers/net/ethernet/mellanox/mlx5/core/en_tx.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50002

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50003

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50005

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50006

Affected technology

linux kernel · before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before 4192adefc9c570698821c5eb9873320eac2fcbf1, e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before 3c46d6060d3e38de22196c1fe7706c5a3c696285, e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before 53b1999cfd2c7addf2e581a32865fe8835467b44, e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before ef05572da0c0eb89614ed01cc17d3c882bdbd1ff, e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before 9fedf51ab8cf7b69bff08f37fe0989fec7f5d870, e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before d43776b907659affef1de888525847d64b244194, e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before 6252cb6bde7fc76cb8dcb49d1def7c326b190820, e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before d58a00e981d3118b91d503da263e640b7cde6729, e8238f9a8339b3578c85e4192a7a23bc2bdc0333 to before cc749e61c011c255d81b192a822db650c68b313f
Linux

Linux · 3.10
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
Function: calling, while, might
File: fs/ext4/migrate.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50007

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50008

Affected technology

linux kernel · before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · 21f58d200388480547df909b5464b5aafebf299d to before b55c8848fdc81514ec047b2a0ec782ffe9ab5323, 21f58d200388480547df909b5464b5aafebf299d to before f9310a6704bf52e2493480edea896e1f9b795d40, 21f58d200388480547df909b5464b5aafebf299d to before 1756918f51e9ab247a0f4782cc28853c2bb457c1, 21f58d200388480547df909b5464b5aafebf299d to before e59bdb1ba594104cd0ee0af3ee9e4435d842a8fe, 21f58d200388480547df909b5464b5aafebf299d to before 17199b69a84798efffc475040fbef44374ef1de1, 21f58d200388480547df909b5464b5aafebf299d to before fef7b51f22cf2049b0ca6740adeb0ba6f2e671dc, 21f58d200388480547df909b5464b5aafebf299d to before 71267bd4e8c752d7af6c6b96bb83984a6a95273d, 21f58d200388480547df909b5464b5aafebf299d to before a3a12c30f9510f3753286fadbc6cdb7dad78c1d5, 21f58d200388480547df909b5464b5aafebf299d to before 498365e52bebcbc36a93279fe7e9d6aec8479cee
Linux

Linux · 3.15
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/net/wireless/marvell/mwifiex/fw.h, drivers/net/wireless/marvell/mwifiex/scan.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50009

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50010

Affected technology

linux kernel · before 6.11.3 (exclusive)
linux

Linux · 0fd338b2d2cdf827091ae819ae90ad760b94ad0c to before c9b77438077d5a20c79ead95bcdaf9bd4797baaf, 0fd338b2d2cdf827091ae819ae90ad760b94ad0c to before b723f96407a0a078cf75970e4dbf16b46d286a61, 0fd338b2d2cdf827091ae819ae90ad760b94ad0c to before 0bdf77be2330062b3a64f2bec39f62ab874a6796, 0fd338b2d2cdf827091ae819ae90ad760b94ad0c to before 0d16f53c91111cec914f0811fcc526a2ba77b20d, 0fd338b2d2cdf827091ae819ae90ad760b94ad0c to before 0d196e7589cefe207d5d41f37a0a28a1fdeeb7c6
Linux

Linux · 5.9
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/exec.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50012

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50013

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50014

Affected technology

linux kernel · before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · 01efe93a5aa20a19b390426718dc214898a7c2ec to before 6e35f560daebe40264c95e9a1ab03110d4997df6, 01efe93a5aa20a19b390426718dc214898a7c2ec to before d157fc20ca5239fd56965a5a8aa1a0e25919891a, 01efe93a5aa20a19b390426718dc214898a7c2ec to before b002031d585a14eed511117dda8c6452a804d508, 01efe93a5aa20a19b390426718dc214898a7c2ec to before 23dfdb56581ad92a9967bcd720c8c23356af74c1
Linux

Linux · 6.6
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: ext4_check_bdev_write_error
File: fs/ext4/super.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50015

Affected technology

linux kernel · from 4.10 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.55 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.10.14 (exclusive)
linux

linux kernel · from 6.11 (inclusive), before 6.11.3 (exclusive)
linux

Linux · 776722e85d3b0936253ecc3d14db4fba37f191ba to before f8a7c342326f6ad1dfdb30a18dd013c70f5e9669, 776722e85d3b0936253ecc3d14db4fba37f191ba to before 8c30a9a8610c314554997f86370140746aa35661, 776722e85d3b0936253ecc3d14db4fba37f191ba to before abfaa876b948baaea4d14f21a1963789845c8b4c, 776722e85d3b0936253ecc3d14db4fba37f191ba to before 5efccdee4a7d507a483f20f880b809cc4eaef14d, 776722e85d3b0936253ecc3d14db4fba37f191ba to before a9f331f51515bdb3ebc8d0963131af367ef468f6, 776722e85d3b0936253ecc3d14db4fba37f191ba to before ec0dd451e236c46e4858d53e9e82bae7797a7af5, 776722e85d3b0936253ecc3d14db4fba37f191ba to before dda898d7ffe85931f9cca6d702a51f33717c501e
Linux

Linux · 4.10
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: fs/ext4/file.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50016

Affected technology

Rejected reason: This CVE ID · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50017

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50019

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50020

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50021

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50022

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50023

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50024

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50025

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50026

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50027

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50028

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50029

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50030

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50031

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50032

Affected technology

Rejected reason: This CVE ID · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50033

Affected technology

linux kernel · from 3.2 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.57 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.4 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

Linux · b5451d783ade99308dfccdf5ca284ed07affa4ff to before ba6501ea06462d6404d57d5644cf2854db38e7d7, b5451d783ade99308dfccdf5ca284ed07affa4ff to before 36b054324d18e51cf466134e13b6fbe3c91f52af, b5451d783ade99308dfccdf5ca284ed07affa4ff to before 5e336384cc9b608e0551f99c3d87316ca3b0e51a, b5451d783ade99308dfccdf5ca284ed07affa4ff to before ff5e0f895315706e4ca5a19df15be6866cee4f5d, b5451d783ade99308dfccdf5ca284ed07affa4ff to before 8bb79eb1db85a10865f0d4dd15b013def3f2d246, b5451d783ade99308dfccdf5ca284ed07affa4ff to before 29e8d96d44f51cf89a62dd042be35d052833b95c, b5451d783ade99308dfccdf5ca284ed07affa4ff to before 7d3fce8cbe3a70a1c7c06c9b53696be5d5d8dd5c
Linux

Linux · 3.2
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/net/slip/slhc.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50034

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50035

Affected technology

linux kernel · from 2.6.12 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.57 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.4 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4151ec65abd755133ebec687218fadd2d2631167, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8dfe93901b410ae41264087427f3b9f389388f83, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 30d91a478d58cbae3dbaa8224d17d0d839f0d71b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fadf8fdb3110d3138e05c3765f645535434f8d76, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ce249a4c68d0ce27a8c5d853338d502e2711a314, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8fe992ff3df493d1949922ca234419f3ede08dff, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c007a14797240607038bd3464501109f408940e2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 40dddd4b8bd08a69471efd96107a4e1c73fabefc
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/net/ppp/ppp_async.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and availability impact as high; integrity impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50036

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50037

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50038

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50039

Affected technology

linux kernel · from 2.6.27 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.57 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.4 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

Linux · 175f9c1bba9b825d22b142d183c9e175488b260c to before 2acbb9539bc2284e30d2aeb789c3d96287014264, 175f9c1bba9b825d22b142d183c9e175488b260c to before adbc3eef43fc94c7c8436da832691ae02333a972, 175f9c1bba9b825d22b142d183c9e175488b260c to before 8fb6503592d39065316f45d267c5527b4e7cd995, 175f9c1bba9b825d22b142d183c9e175488b260c to before 76feedc74b90270390fbfdf74a2e944e96872363, 175f9c1bba9b825d22b142d183c9e175488b260c to before 1edf039ee01788ffc25625fe58a903ae2efa213e, 175f9c1bba9b825d22b142d183c9e175488b260c to before 3dc6ee96473cc2962c6db4297d4631f261be150f, 175f9c1bba9b825d22b142d183c9e175488b260c to before 3cb7cf1540ddff5473d6baeb530228d19bc97b8a
Linux

Linux · 2.6.27
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: include/net/sch_generic.h, net/sched/sch_api.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50040

Affected technology

linux kernel · from 4.14.322 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.19.291 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.4.251 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.10.188 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.15.150 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 6.1.42 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.4.7 (inclusive), before 6.5 (exclusive)
linux

linux kernel · from 6.5 (inclusive), before 6.6.57 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.4 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

Linux · 124e39a734cb90658b8f0dc110847bbfc6e33792 to before dca2ca65a8695d9593e2cf1b40848e073ad75413, c9f56f3c7bc908caa772112d3ae71cdd5d18c257 to before c92cbd283ddcf55fd85a9a9b0ba13298213f3dd7, 994c2ceb70ea99264ccc6f09e6703ca267dad63c to before d79af3af2f49c6aae9add3d492c04d60c1b85ce4, fa92c463eba75dcedbd8d689ffdcb83293aaa0c3 to before 0a94079e3841d00ea5abb05e3233d019a86745f6, 39695e87d86f0e7d897fba1d2559f825aa20caeb to before 6a39c8f5c8aae74c5ab2ba466791f59ffaab0178, 004d25060c78fc31f66da0fa439c544dda1ac9d5 to before 57c5053eaa5f9a8a99e34732e37a86615318e464, 004d25060c78fc31f66da0fa439c544dda1ac9d5 to before 500be93c5d53b7e2c5314292012185f0207bad0c, 004d25060c78fc31f66da0fa439c544dda1ac9d5 to before 330a699ecbfc9c26ec92c6310686da1230b4e7eb, c2312e1d12b1c3ee4100c173131b102e2aed4d04, 41f63b72a01c0e0ac59ab83fd2d921fcce0f602d, 4.19.291 to before 4.19.323, 5.4.251 to before 5.4.285, 5.10.188 to before 5.10.227, 5.15.150 to before 5.15.168, 6.1.42 to before 6.1.113, 4.14.322 to before 4.15, 6.4.7 to before 6.5
Linux

Linux · 6.5
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/net/ethernet/intel/igb/igb_main.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50041

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50042

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50043

Affected technology

linux kernel · from 6.9 (inclusive), before 6.11.4 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

Linux · 3f29cc82a84c23cfd12b903029dd26002ca825f5 to before 7ca9e472ce5c67daa3188a348ece8c02a0765039, 3f29cc82a84c23cfd12b903029dd26002ca825f5 to before c88c150a467fcb670a1608e2272beeee3e86df6e, 172d038b7c4d3cfa9fc5ac210577c5c4f8256320, 6.6.160 to before 6.7
Linux

Linux · 6.9
Linux

Component: Not specified by the source
File: fs/nfsd/nfs4state.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50044

Affected technology

linux kernel · from 2.6.27 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.57 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.4 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

Linux · 3241ad820dbb172021e0268b5611031991431626 to before b77b3fb12fd483cae7c28648903b1d8a6b275f01, 3241ad820dbb172021e0268b5611031991431626 to before 869c6ee62ab8f01bf2419e45326642be5c9b670a, 3241ad820dbb172021e0268b5611031991431626 to before ef44274dae9b0a90d1a97ce8b242a3b8243a7745, 3241ad820dbb172021e0268b5611031991431626 to before 496b2ab0fd10f205e08909a125485fdc98843dbe, 3241ad820dbb172021e0268b5611031991431626 to before ced98072d3511b232ae1d3347945f35f30c0e303, 3241ad820dbb172021e0268b5611031991431626 to before 38b2d5a57d125e1c17661b8308c0240c4a43b534, 3241ad820dbb172021e0268b5611031991431626 to before 4cb9807c9b53bf1e5560420d26f319f528b50268, 3241ad820dbb172021e0268b5611031991431626 to before 08d1914293dae38350b8088980e59fbc699a72fe
Linux

Linux · 2.6.27
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/bluetooth/rfcomm/sock.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 3.3/10) rates confidentiality and integrity impact as none; availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50045

Affected technology

linux kernel · from 4.11 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.57 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.4 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

Linux · 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd to before f07131239a76cc10d5e82c19d91f53cb55727297, 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd to before 75dfcb758015c97e1accd6340691fca67d363bed, 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd to before cce8419b8168f6e7eb637103a47f916f3de8bc81, 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd to before 95c0cff5a1a5d28bf623b92eb5d1a8f56ed30803, 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd to before 78ed917133b118661e1fe62d4a85d5d428ee9568, 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd to before 3453f5839420bfbb85c86c61e49f49ffd0f041c4, 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd to before 915717e0bb9837cc5c101bc545af487bd787239e, 11538d039ac6efcf4f1a6c536e1b87cd3668a9fd to before f9ff7665cd128012868098bbd07e28993e314fdb
Linux

Linux · 4.11
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/bridge/br_netfilter_hooks.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50046

Affected technology

linux kernel · from 5.5 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.57 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.4 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

Linux · 0e65a32c8a569db363048e17a708b1a0913adbef to before f892165c564e3aab272948dbb556cc20e290c55a, 0e65a32c8a569db363048e17a708b1a0913adbef to before 584c019baedddec3fd634053e8fb2d8836108d38, 0e65a32c8a569db363048e17a708b1a0913adbef to before 632344b9efa064ca737bfcdaaaced59fd5f18ae9, 0e65a32c8a569db363048e17a708b1a0913adbef to before fca41e5fa4914d12b2136c25f9dad69520b52683, 0e65a32c8a569db363048e17a708b1a0913adbef to before ef9189bb15dcbe7ed3f3515aaa6fc8bf7483960d, 0e65a32c8a569db363048e17a708b1a0913adbef to before a848c29e3486189aaabd5663bc11aea50c5bd144
Linux

Linux · 5.5
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: fs/nfs/client.c, fs/nfs/nfs42proc.c, fs/nfs/nfs4state.c, include/linux/nfs_fs_sb.h

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50047

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50048

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50049

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50051

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50055

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50056

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50057

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50058

Affected technology

linux kernel · before 6.6.57 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.4 (exclusive)
linux

Linux · af224ca2df297440448b9d407d21b50982c6d532 to before 2fe399bb8efd0d325ab1138cf8e3ecf23a39e96d, af224ca2df297440448b9d407d21b50982c6d532 to before 399927f0f875b93f3d5a0336d382ba48b8671eb2, af224ca2df297440448b9d407d21b50982c6d532 to before d7b5876a6e74cdf8468a478be6b23f2f5464ac7a, af224ca2df297440448b9d407d21b50982c6d532 to before e418d91195d29d5f9c9685ff309b92b04b41dc40, af224ca2df297440448b9d407d21b50982c6d532 to before 76ed24a34223bb2c6b6162e1d8389ec4e602a290, af224ca2df297440448b9d407d21b50982c6d532 to before 602babaa84d627923713acaf5f7e9a4369e77473
Linux

Linux · 4.7
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/tty/serial/serial_core.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50059

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50060

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50061

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50062

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50063

Affected technology

debian linux · 11.0
debian

linux kernel · from 5.5 (inclusive), before 6.1.135 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.57 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.4 (exclusive)
linux

Linux · f1b9509c2fb0ef4db8d22dac9aef8e856a5d81f6 to before d9a807fb7cbfad4328824186e2e4bee28f72169b, f1b9509c2fb0ef4db8d22dac9aef8e856a5d81f6 to before 5d5e3b4cbe8ee16b7bf96fd73a421c92a9da3ca1, f1b9509c2fb0ef4db8d22dac9aef8e856a5d81f6 to before 88c2a10e6c176c2860cd0659f4c0e9d20b3f64d1, f1b9509c2fb0ef4db8d22dac9aef8e856a5d81f6 to before 28ead3eaabc16ecc907cfb71876da028080f6356
Linux

Linux · 5.5
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: tail
File: include/linux/bpf.h, kernel/bpf/core.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50064

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50065

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50066

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50067

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50068

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50069

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50070

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50071

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50072

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50073

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50074

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50075

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50076

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50077

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50078

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50079

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50080

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50081

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50082

Affected technology

linux kernel · from 4.19 (inclusive), before 5.10.228 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.169 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.114 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.58 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.5 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

Linux · 38cfb5a45ee013bfab5d1ae4c4738815e744b440 to before d04b72c9ef2b0689bfc1057d21c4aeed087c329f, 38cfb5a45ee013bfab5d1ae4c4738815e744b440 to before 3bc6d0f8b70a9101456cf02ab99acb75254e1852, 38cfb5a45ee013bfab5d1ae4c4738815e744b440 to before 455a469758e57a6fe070e3e342db12e4a629e0eb, 38cfb5a45ee013bfab5d1ae4c4738815e744b440 to before b5e900a3612b69423a0e1b0ab67841a1fb4af80f, 38cfb5a45ee013bfab5d1ae4c4738815e744b440 to before 4c5b123ab289767afe940389dbb963c5c05e594e, 38cfb5a45ee013bfab5d1ae4c4738815e744b440 to before 04f283fc16c8d5db641b6bffd2d8310aa7eccebc, 38cfb5a45ee013bfab5d1ae4c4738815e744b440 to before e972b08b91ef48488bae9789f03cfedb148667fb
Linux

Linux · 4.19
Linux

Component: Not specified by the source
File: block/blk-rq-qos.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50083

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50084

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50085

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50086

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50087

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50088

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50090

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50091

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50092

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50093

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50094

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50095

Affected technology

linux kernel · before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.57 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.4 (exclusive)
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 713adaf0ecfc49405f6e5d9e409d984f628de818, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7022a517bf1ca37ef5a474365bcc5eafd345a13a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e80eadb3604a92d2d086e956b8b2692b699d4d0a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a195a42dd25ca4f12489687065d00be64939409f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3e799fa463508abe7a738ce5d0f62a8dfd05262a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2a777679b8ccd09a9a65ea0716ef10365179caac
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: drivers/infiniband/core/mad.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50096

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50098

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50099

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50100

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50101

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50102

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50103

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50104

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50105

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50106

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50107

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50108

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50109

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50110

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50111

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50112

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50113

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50114

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50115

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50116

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50117

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50118

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50119

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50120

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50121

Affected technology

linux kernel · from 5.10.220 (inclusive), before 5.15 (exclusive)
linux

linux kernel · from 5.15.154 (inclusive), before 6.1 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.59 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.6 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

Linux · 2bbf10861d51dae76c6da7113516d0071c782653 to before f67138dd338cb564ade7d3755c8cd4f68b46d397, 958294a3eb82026fcfff20b0287a90e9c854785e to before 5ade4382de16c34d9259cb548f36ec5c4555913c, f3ea5ec83d1a827f074b2b660749817e0bf2b23e to before 36775f42e039b01d4abe8998bf66771a37d3cdcc, 7c24fa225081f31bc6da6a355c1ba801889ab29a to before f965dc0f099a54fca100acf6909abe52d0c85328, 7c24fa225081f31bc6da6a355c1ba801889ab29a to before add1df5eba163a3a6ece11cb85890e2e410baaea, 7c24fa225081f31bc6da6a355c1ba801889ab29a to before d5ff2fb2e7167e9483846e34148e60c0c016a1f6, 5.10.220 to before 5.10.233, 5.15.154 to before 5.15.176, 6.1.81 to before 6.1.123
Linux

Linux · 6.2
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
Function: will
File: fs/nfsd/nfs4state.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50122

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50123

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50124

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50125

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50126

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50127

Affected technology

linux kernel · from 5.2 (inclusive), before 5.15.170 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.115 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.59 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.6 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

Linux · a3d43c0d56f1b94e74963a2fbadfb70126d92213 to before 2f868ce6013548a713c431c679ef73747a66fcf3, a3d43c0d56f1b94e74963a2fbadfb70126d92213 to before 8a283a19026aaae8a773fd8061263cfa315b127f, a3d43c0d56f1b94e74963a2fbadfb70126d92213 to before 999612996df28d81f163dad530d7f8026e03aec6, a3d43c0d56f1b94e74963a2fbadfb70126d92213 to before fe371f084073e8672a2d7d46b335c3c060d1e301, a3d43c0d56f1b94e74963a2fbadfb70126d92213 to before 0d4c0d2844e4eac3aed647f948fd7e60eea56a61, a3d43c0d56f1b94e74963a2fbadfb70126d92213 to before 2240f9376f20f8b6463232b4ca7292569217237f, a3d43c0d56f1b94e74963a2fbadfb70126d92213 to before f504465970aebb2467da548f7c1efbbf36d0f44b
Linux

Linux · 5.2
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/sched/sch_taprio.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A local attacker with low privileges could trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.

CVE-2024-50128

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50129

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50130

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50131

Affected technology

linux kernel · from 5.1 (inclusive), before 5.15.170 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.115 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.59 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.6 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

Linux · dec65d79fd269d05427c8167090bfc9c3d0b56c4 to before 5e3231b352725ff4a3a0095e6035af674f2d8725, dec65d79fd269d05427c8167090bfc9c3d0b56c4 to before 02874ca52df2ca2423ba6122039315ed61c25972, dec65d79fd269d05427c8167090bfc9c3d0b56c4 to before b86b0d6eea204116e4185acc35041ca4ff11a642, dec65d79fd269d05427c8167090bfc9c3d0b56c4 to before f4ed40d1c669bba1a54407d8182acdc405683f29, dec65d79fd269d05427c8167090bfc9c3d0b56c4 to before a14a075a14af8d622c576145455702591bdde09d, dec65d79fd269d05427c8167090bfc9c3d0b56c4 to before 5fd942598ddeed9a212d1ff41f9f5b47bcc990a7, dec65d79fd269d05427c8167090bfc9c3d0b56c4 to before 0b6e2e22cb23105fcb171ab92f0f7516c69c8471
Linux

Linux · 5.1
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: kernel/trace/trace_probe.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality and availability impact as high; integrity impact as low. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50132

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50133

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50134

Affected technology

linux kernel · before 5.15.170 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.115 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.59 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.6 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

Linux · dd55d44f408419278c00887bfcb2261d0caae350 to before 02c86c5d5ef4bbba17d38859c74872825f536617, dd55d44f408419278c00887bfcb2261d0caae350 to before 75f828e944dacaac8870418461d3d48a1ecf2331, dd55d44f408419278c00887bfcb2261d0caae350 to before 34a422274b693507025a7db21519865d1862afcb, dd55d44f408419278c00887bfcb2261d0caae350 to before 7458a6cdaebb3dc59af8578ee354fae78a154c4a, dd55d44f408419278c00887bfcb2261d0caae350 to before 9eb32bd23bbcec44bcbef27b7f282b7a7f3d0391, dd55d44f408419278c00887bfcb2261d0caae350 to before fae9dc12c61ce23cf29d09824a741b7b1ff8f01f, dd55d44f408419278c00887bfcb2261d0caae350 to before d92b90f9a54d9300a6e883258e79f36dab53bfae
Linux

Linux · 4.13
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/gpu/drm/vboxvideo/hgsmi_base.c, drivers/gpu/drm/vboxvideo/vboxvideo.h

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50135

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50136

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50137

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50138

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50139

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50140

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50141

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50142

Affected technology

linux kernel · from 2.6.12 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.229 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.170 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.115 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.59 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.6 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f31398570acf0f0804c644006f7bfa9067106b0a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 401ad99a5ae7180dd9449eac104cb755f442e7f3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8df5cd51fd70c33aa1776e5cbcd82b0a86649d73, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2d08a6c31c65f23db71a5385ee9cf9d8f9a67a71, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bce1afaa212ec380bf971614f70909a27882b862, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7d9868180bd1e4cf37e7c5067362658971162366, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e68dd80ba498265d2266b12dc3459164f4ff0c4a, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3f0ab59e6537c6a8f9e1b355b48f9c05a76e8563
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/xfrm/xfrm_user.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50143

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50144

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50145

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50146

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50147

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50148

Affected technology

linux kernel · from 2.6.12 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.229 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.170 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.115 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.59 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.6 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

Linux · 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e232728242c4e98fb30e4c6bedb6ba8b482b6301, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2c439470b23d78095a0d2f923342df58b155f669, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6c151aeb6dc414db8f4daf51be072e802fae6667, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fa58e23ea1359bd24b323916d191e2e9b4b19783, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 03015b6329e6de42f03ec917c25c4cf944f81f66, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before d10cd7bf574ead01fae140ce117a11bcdacbe6a8, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 20c424bc475b2b2a6e0e2225d2aae095c2ab2f41, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 64a90991ba8d4e32e3173ddd83d0b24167a5668c
Linux

Linux · 2.6.12
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: net/bluetooth/bnep/core.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50149

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50150

Affected technology

linux kernel · from 4.19 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.229 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.170 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.115 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.59 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.6 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

Linux · 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 to before 2b0b33e8a58388fa9078f0fbe9af1900e6b08879, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 to before 2c15c4133d00f5da632fce60ed013fc31aa9aa58, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 to before 6af43ec3bf40f8b428d9134ffa7a291aecd60da8, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 to before 87474406056891e4fdea0794e1f632b21b3dfa27, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 to before bee1b68cb8bcee4fd3a8bde3a4886e0b1375dc4d, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 to before 1ded6b12499e6dee9b0e1ceac633be36538f6fc2, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 to before 68a7c7fe322546be1464174c8d85874b8161deda, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 to before befab3a278c59db0cc88c8799638064f6d3fd6f8
Linux

Linux · 4.19
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/usb/typec/class.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50151

Affected technology

linux kernel · from 5.0 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.229 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.170 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.115 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.59 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.6 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

Linux · e77fe73c7e38c36145825d84cfe385d400aba4fd to before 6f0516ef1290da24b85461ed08a0938af7415e49, e77fe73c7e38c36145825d84cfe385d400aba4fd to before ed31aba8ce93472d9e16f5cff844ae7c94e9601d, e77fe73c7e38c36145825d84cfe385d400aba4fd to before e07d05b7f5ad9a503d9cab0afde2ab867bb65470, e77fe73c7e38c36145825d84cfe385d400aba4fd to before 2ef632bfb888d1a14f81c1703817951e0bec5531, e77fe73c7e38c36145825d84cfe385d400aba4fd to before b209c3a0bc3ac172265c7fa8309e5d00654f2510, e77fe73c7e38c36145825d84cfe385d400aba4fd to before fe92ddc1c32d4474e605e3a31a4afcd0e7d765ec, e77fe73c7e38c36145825d84cfe385d400aba4fd to before 1ab60323c5201bef25f2a3dc0ccc404d9aca77f1
Linux

Linux · 5.0
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: fs/smb/client/smb2pdu.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50152

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50153

Affected technology

linux kernel · from 5.11 (inclusive), before 5.15.170 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.115 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.59 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.6 (exclusive)
linux

linux kernel · 5.10.180
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

Linux · 008b936bbde3e87a611b3828a0d5d2a4f99026a0 to before 8c1e6717f60d31f8af3937c23c4f1498529584e1, 1526d9f10c6184031e42afad0adbdde1213e8ad1 to before 39e02fa90323243187c91bb3e8f2f5f6a9aacfc7, 1526d9f10c6184031e42afad0adbdde1213e8ad1 to before 895ab729425ef9bf3b6d2f8d0853abe64896f314, 1526d9f10c6184031e42afad0adbdde1213e8ad1 to before b80e9bc85bd9af378e7eac83e15dd129557bbdb6, 1526d9f10c6184031e42afad0adbdde1213e8ad1 to before 14a6a2adb440e4ae97bee73b2360946bd033dadd, 1526d9f10c6184031e42afad0adbdde1213e8ad1 to before fca6caeb4a61d240f031914413fcc69534f6dc03, 5.10.180 to before 5.10.229
Linux

Linux · 5.11
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: drivers/target/target_core_device.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50154

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50155

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50156

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50157

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50158

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50159

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50160

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50161

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50162

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50163

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50164

Affected technology

linux kernel · from 5.19 (inclusive), before 6.6.59 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.6 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

Linux · 97e6d7dab1ca4648821c790a2b7913d6d5d549db to before 43f4df339a4d375bedcad29a61ae6f0ee7a048f8, 97e6d7dab1ca4648821c790a2b7913d6d5d549db to before 48068ccaea957469f1adf78dfd2c1c9a7e18f0fe, 97e6d7dab1ca4648821c790a2b7913d6d5d549db to before 54bc31682660810af1bed7ca7a19f182df8d3df8, 97e6d7dab1ca4648821c790a2b7913d6d5d549db to before 8ea607330a39184f51737c6ae706db7fdca7628e, 6099a6c8a749a5c8d5f8b4c4342022a92072a02b, bfe25df63048edd4ceaf78a2fc755d5e2befc978, 717c39718dbc4f7ebcbb7b625fb11851cd9007fe, 5d0bba8232bf22ce13747cbfc8f696318ff01a50, 70674d11d14eeecad90be4b409a22b902112ba32, a08d942ecbf46e23a192093f6983cb1d779f4fa8, 5.15.45 to before 5.16, 5.17.13 to before 5.18, 5.18.2 to before 5.19
Linux

Linux · 5.19
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: kernel/bpf/verifier.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Helpers access to variable memory") set meta to NULL in order force the user can always initialize the passed buffer to the helper. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality impact as none; integrity and availability impact as high.

CVE-2024-50165

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50166

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50167

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50168

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50169

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50170

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50171

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50172

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50173

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50174

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50176

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50177

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50178

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50179

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50180

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50181

Affected technology

Rejected reason: This CVE ID · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50182

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50183

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50184

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50185

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50186

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50187

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50188

Affected technology

linux kernel · from 5.10 (inclusive), before 5.10.227 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.168 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.113 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.57 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.4 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

Linux · a29de52ba2a156873505d8b8cef44e69925b8114 to before 21b5af7f0c99b3bf1fd02016e6708b613acbcaf4, a29de52ba2a156873505d8b8cef44e69925b8114 to before ad0d76b8ee5db063791cc2e7a30ffc9852ac37c4, a29de52ba2a156873505d8b8cef44e69925b8114 to before c1944b4253649fc6f2fb53e7d6302eb414d2182c, a29de52ba2a156873505d8b8cef44e69925b8114 to before 9ca634676ff66e1d616259e136f96f96b2a1759a, a29de52ba2a156873505d8b8cef44e69925b8114 to before e3f2de32dae35bc7d173377dc97b5bc9fcd9fc84, a29de52ba2a156873505d8b8cef44e69925b8114 to before a842e443ca8184f2dc82ab307b43a8b38defd6a5
Linux

Linux · 5.10
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
Function: the
File: drivers/net/phy/dp83869.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50189

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50190

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50191

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50192

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50193

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50194

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50195

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50196

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50197

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50198

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50199

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50200

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50201

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50202

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50203

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50204

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50205

Affected technology

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.229 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.170 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.115 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.59 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.6 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

Linux · 826b5de90c0bca4e9de6231da9e1730480621588 to before d575414361630b8b0523912532fcd7c79e43468c, 826b5de90c0bca4e9de6231da9e1730480621588 to before 5e431f85c87bbffd93a9830d5a576586f9855291, 826b5de90c0bca4e9de6231da9e1730480621588 to before 7d4eb9e22131ec154e638cbd56629195c9bcbe9a, 826b5de90c0bca4e9de6231da9e1730480621588 to before d2826873db70a6719cdd9212a6739f3e6234cfc4, 826b5de90c0bca4e9de6231da9e1730480621588 to before 4bdc21506f12b2d432b1f2667e5ff4c75eee58e3, 826b5de90c0bca4e9de6231da9e1730480621588 to before 3452d39c4704aa12504e4190298c721fb01083c3, 826b5de90c0bca4e9de6231da9e1730480621588 to before 72cafe63b35d06b5cfbaf807e90ae657907858da
Linux

Linux · 4.20
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: sound/firewire/amdtp-stream.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50206

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50207

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50208

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50209

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50210

Affected technology

linux kernel · from 5.10.228 (inclusive), before 5.11 (exclusive)
linux

linux kernel · 5.15.169
linux

linux kernel · 6.1.114
linux

linux kernel · 6.6.58
linux

linux kernel · 6.11.5
linux

linux kernel · 6.12 · update rc4
linux

Linux · 29f085345cde24566efb751f39e5d367c381c584 to before d005400262ddaf1ca1666bbcd1acf42fe81d57ce, e0c966bd3e31911b57ef76cec4c5796ebd88e512 to before a8219446b95a859488feaade674d13f9efacfa32, 673a1c5a2998acbd429d6286e6cad10f17f4f073 to before c7fcfdba35abc9f39b83080c2bce398dad13a943, c8789fbe2bbf75845e45302cba6ffa44e1884d01 to before e56e0ec1b79f5a6272c6e78b36e9d593aa0449af, 27abbde44b6e71ee3891de13e1a228aa7ce95bfe to before 5f063bbf1ee6b01611c016b54e050a41506eb794, a3f169e398215e71361774d13bf91a0101283ac2 to before 1ba33b327c3f88a7baee598979d73ab5b44d41cc, 1ff7247101af723731ea42ed565d54fb8f341264 to before b27330128eca25179637c1816d5a72d6cc408c66, d8794ac20a299b647ba9958f6d657051fc51a540 to before 6e62807c7fbb3c758d233018caf94dfea9c65dbd
Linux

Linux · 5.10.228 to before 5.10.229, 5.15.169 to before 5.15.170, 6.1.114 to before 6.1.115, 6.6.58 to before 6.6.59, 6.11.5 to before 6.11.6
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

Component: Not specified by the source
File: kernel/time/posix-clock.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50211

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50212

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50213

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50214

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50215

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50216

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50217

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50218

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50220

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50221

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50222

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50223

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50224

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50225

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50226

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50227

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50229

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50230

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50231

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50232

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50233

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50234

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50235

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50236

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50237

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50238

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50239

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50240

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50242

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50243

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50244

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50245

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50246

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50247

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50248

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50249

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50250

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50251

Affected technology

linux kernel · from 4.5 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.229 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.171 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.116 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.60 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.7 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

linux kernel · 6.12 · update rc5
linux

Linux · 7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before a661ed364ae6ae88c2fafa9ddc27df1af2a73701, 7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before ac7df3fc80fc82bcc3b1e8f6ebc0d2c435d0c534, 7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before e3e608cbad376674d19a71ccd0d41804d9393f02, 7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before b1d2de8a669fa14c499a385e056944d5352b3b40, 7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before d3217323525f7596427124359e76ea0d8fcc9874, 7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before 0ab3be58b45b996764aba0187b46de19b3e58a72, 7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before c43e0ea848e7b9bef7a682cbc5608022d6d29d7b, 7ec3f7b47b8d9ad7ba425726f2c58f9ddce040df to before d5953d680f7e96208c29ce4139a0e38de87a57fe
Linux

Linux · 4.5
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before V1.1.1
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.0 to before V3.1.5
Siemens

RUGGEDCOM RST2428P · 0 to before V3.2
Siemens

SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · 0 to before V3.2
Siemens

SCALANCE XCM-/XRM-/XCH-/XRH-300 family · 0 to before V3.2
Siemens

Component: Not specified by the source
File: net/netfilter/nft_payload.c

Attack conditions (NVD, CVSS 3.1): Local · No privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 6.2/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

CVE-2024-50252

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50253

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50254

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50255

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50256

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50257

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50258

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50259

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50260

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50261

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2024-50262

Affected technology

linux kernel · from 4.16 (inclusive), before 4.19.323 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.285 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.229 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.171 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.116 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.60 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.11.7 (exclusive)
linux

linux kernel · 6.12 · update rc1
linux

linux kernel · 6.12 · update rc2
linux

linux kernel · 6.12 · update rc3
linux

linux kernel · 6.12 · update rc4
linux

linux kernel · 6.12 · update rc5
linux